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J. INTRODUCTION 


A. BACKGROUND 

The Department of Defense (DOD) and the Departnent of the Navy (DON) allo- 
cate billions of dollars each year for initial development or maintenanec of progressively 
more complex weapons and communications systems. These advanecd systems in- 
creasingly rely on requirements for hard real-time processing of information, utilizing 
embedded computer systems to momtor or control system performance. These embed- 
ded systems currently perform time-critical functions that are primarily computational 
in nature, such as missile guidance or communications network control. As carly as 
1973, studies showed that computer sottware alone comprised approximately 46 pereent 
(over 3 billion dollars) of the estimated total DOD computer costs of 7.5 billion dollars. 
In addition, 56 percent of these software costs were devoted specifically to embedded 
Syecems. [itc{. I: p. 14| 

As they approach the 21st century, the DOD and the DON will be faced with ever 
Increasing demands for complex, hard real-time or embedded systems. This growth of 
and dependency on embedded systems is readily apparent when compared with the 
growing civilian reliance on sinular, small-scale systems to prepare their food and “drive” 
their automobiles. Considering the growth of software development and maintenance 
costs versus computer hardware costs, users must insist that systems are reeeived on 
schedule and are responsive to stated needs; that they are reliable, efficient and within 
cost estimates; and, that they are modifiable and transportable to other applications. 
Fulfillmg these user demands requires a systematic approach to software development 
and an ability to deal with complex solutions. 

i. Software Engineering 

Software cngmecering 1s the application of seienee aud mathematics (specifically 

algorithms) by which the capabilities of computers are made useful through the apphi- 
cation of computer software programs, procedures and related documentation. Gener- 
ally accepted goals for software engmecring fall under the two related categories of 
performance and design quality. System performance is of primary importanee to tlic 
user. «\ delivered software system must accurately represent the user’s stated require- 
ments and also consistently produce highly reliable responses within the anticipated en- 


vironment. Quality of the design is becoming increasingly important to both the user 


and the systems engineer. A delivered svstem must be efficient in 15 Use Of Tesolmeas 
understandable, and modifiable in order to mininuze modification or maintenance costs 
in the future. These goals are achievable by utihzing a modular architecture, localization 
of logically-related resources, uniformity of notation, accuracy of the nunimum required 
elements and coniirmability through the use of demonstrauons. [Ref. 1: pp. 29-35 
Software engineering encourages the use of a development life cvcle methodology that 
systematically and consistently incorporates these goals and principles in the creation 
of so{tware svstems. 
2. traditional Life Cycle 

The traditional waterfall hfe cycle methodology currently used for devcloping 
large software programs incorporates individual development stages. These stages in- 
clude recu'rements analvsis, functional specifications. architectural design. module de- 
sign, implementation and testing. Requirements analvsis establishes the purpose of the 
nitended system and defines the currently perceived constraints or boundaries within 
Which the system wili function. The functional specifications define aspects and inter- 
faces of the proposed systein that are visible to the user. The architectural design de- 
scribes a high-level model of the system: while module design describes the algorithms 
and data structures for implementing the architectural design. The implementation stage 
involves the actual hand coding of the executable programs tn a programming language 
which are then tested for performance accuracy. These stages are normally completed 
individually and sequentially before system performance 1s validated by the user. In- 
consistencies with cxpected performance could result in minor changes to software 1m- 
plementation or in drastic modifications if design nusconceptions occurred during the 
requirements analysis or functional specification stages. Depending on the full impact 
of these inconsistencies, delivery dates could shp, costs m dollars and man-hours could 
increase, and the overall reliability and accurucy of the soltware product Couldeiemm 
question. 

When this tradigonal life cycle approach is applied to hard real-time or embed- 
Jed systems, the potential for major inconsistencies increases. One of the major difler- 
ences between a real-time systein and a conventional computer system 1s the required 
precision and accuracy of the application software. The response time of each individual 
operation may have a unique value to the system which varies with time. [i agai 
timie systems this response time is a critical determining factor in the accuracy of the 


software. These response umes, or deadlines, must be met or the system will fail to 


tJ 


(imemonweorect’, Often Wacdhine@mto cutastropluc coisequences. [Ref 2: p. 113] [or 
exainple, as part of a larger computer system, an ermbedded systein can incorporate 
stringent real-time constraints, parallel processing using two or more computers, and a 
high degree of reliability. These requirements will often exceed the capacity or capabil- 
ities of one software engineer, but may instead require several individuals working mde- 
pendently on different seginents of the system. In summation, without the aid of 
automated software tools, development of hard real-time systems using a traditional life 
cycle approach can become inefficient and less effective. 
3, Rapid Prototyping 
a. Conventional Rapid Prototyping 

Current research suggests a revised miecthodology for the software devel- 
opment life cycle, especially when designing hard real-uime systems. which consists of 
> Seen pee ee 


though current capabilities preclude completely automatic program generation, the re- 


two phases, rapid prototvping and automatic program generation [Rel 


quired software tools and capabilitics do exist for rapid prototyping. As a software 
methodology, rapid prototyping provides the user and designer with a fast, efficient and 
easy-to-use stepwise process. When utilized during the early stages of the developmeuit 
life cvele, rapid prototvping allows validation of the requirements, specifications and in- 
itial design before valuable time and effort are expended on implementation software. 
Figure 1 on page 4 graphically descnbes this methodology as a tvpical 
feedback loop [Ref. 4: p. 3]. Rapid prototyping initially establishes an iterative process 
between the user and the designer to concurrently define specifications and requirements 
for the time critical aspects of the envisioned system. The designer then coustructs a 
model or prototype of the system in a high-level, prototype description language. This 
prototype is a partial representation of the system, including only those critical attributes 
necessary for mecting user requrrenients, and is used as an aid in analysis and design 
rather than as production software. [Ref. 4: pp. 2-5] During demonstrations of the 
prototype, the user validates the prototype’s actual performance against its expected 
Bemormance. If the prototype fails to execute properly or to meet anv critical timing 
constraints, the user identifies required modifications and redefines the critical specifi- 
cations and requirements. This process continues until the user determines that the 
prototype successfully meets the time critical aspects of the cnvisioned svstem. Follow- 
ing this final validation, the designer uses the validated requirements as a basis for the 


design and eventual hand coding of the production software. 
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Figure 1. Rapid Prototyping Method 


b. Computer-Aided Rupid Prototyping 
Computer-aided rapid prototyping further refines the efficiency and accu- 
racv of this new methodology. While utilizing the same iterative approach, computer- 
aided rapid prototyping relies on three major software tools which assist the designer in 
constructing and execuung the prototype. First, the computer-aided environment 
includes a software base management system which creates uniform retrieval specilica- 
tions for software modules in the software database and later retrieves these reusable 


modules for assembling the executable prototype. Second, a graphics-capable user 


interface meluding a svntax-directed editor expedites the destgner’s data entry at a ter- 
mninal and prevents syntax errors in the design. Finally, an execution support svstem 
demonstrates and measures the prototvpe’s performance and analyzes the accuracy of 
design specifications. [Ref. 5: p. 4] Chapter If of this thesis describes the first two 
tools in more detail while Chapter IH provides a detailed description of the third tool. 

A computer-aided rapid prototyping approach will provide the software 
designer with a powerful tool, designed specifically for development of hard real-time or 
embedded systems. Although the traditional approach may also produce an acceptable 
product, rapid prototyping suggests significant advantages jn several major areas. De- 
signing a simplified executable prototype of the envisioned system forces the user and 
the designer to decompose a coinplex system into its major components. Tlus process 
creates modules that individuals can easily understand and manage. This modularized 
design 1s enforced bv a formal prototyping lunguage bused on absiracttons of the svs- 
tems requirements and high-level constructs of the language itself. A computer-aided 
rapid prototyping approach using a modularized design focuses the desiguer’s attention 
on analysis of the requirements and specifications of the systein. At this stage, the de- 
signer should concern himself with the architectural decomposition of a complex svstem 
rather than becoming engrossed with detailed programnung efforts inherent in conven- 
tional prototyping. This approach allows the user to verify requirements and to identify 
problem areas early in the development cvele. This verification process cliininates ex- 
pensive redesign efforts and increases the user’s confidence that the svstem, as envi- 
sioned, is feasible. [Ref 3: pp. 2-3] 

Rapid prototyping offers promising advantages in unproved so{tware engi- 
neering productivity, increased reliability of the finished product, imore realistic cost es- 
timates based on identified system complexity, and a reduction in the total conception 
to operational timefraine [Ref 4: pp. 11-12}. Ongoing research and pioneering etforts 
must now fully elevate computer-aided rapid prototyping fromm its conceptualized design 


into a functioning reality. 


B. OBJECTIVES 

This thesis describes the design and implementation efforts for the Static Scheduler 
subsystem of the Execution Support System (USS) for the Computer Aided Prototyping 
System (CAPS). The primary objective of this thesis is to present the algorithms which 
successfully schedule the critical tume constraints in a hard real-time or embedded system 


model and to establish: unplementation guidelines for the Static Sclieduler. [n achieving 


this objective, duis thesis will also document the Ada®! programining language con- 


structs utilized in developing the Static Scheduler. 


C. ORGANIZATION 

Chapter II describes the external rapid prototvping environment where a Static Sched- 
uler is utilized to execute the prototype of a hard real-time systeni. [tis environiieme 
includes the CAPS and the Prototype Svstem Descenption Language (?SDL)> aime 
Chapter also presents the software tools used in developing the Statc Scihedaias 
Chapter iIf concentrates on the CAPS Execution Support Svstem and, specilicaliveums 
Static Scheduler. The mterfaces between and responsibilities of the Dvnanuc Scheduler, 
Translator and Static Scheduler subsystems are outlined, stressing the importance of the 
Static Scheduler in ensuring accurate execuhon of critical timing constraints. Chapter 
[V outlines the analysis and progra.nnung decisions that were made or encountered 
dunny development of these guidelines. Chapter V presents an application of 
computer-aided rapid prototvping to a telecomnmunications switching system. Chapter 
VI presents conclusions and recommendations stemming from this pioneering research 


effort. 


1 Ada® is a registered trademark of the United States Government, Ada Joint Program Office. 


Il, EXTERNAL ENVIRONMENT 


A. ELEMENTS OF THE EXTERNAL ENVIRONMENT 

Computer-aided rapid prototyping and its revised outlook on the development life 
cycle is a familiar topic with software engineering and development professionals. But 
to the new entrant or to procurement liaison personnel, a basic appreciation fer the 
coniplexity of creating prototypes for hard real-time systems would prove beneficial. 
This Chapter, thercfore, covers the major areas which affect or help create the environ- 
ment within which the Static Scheduler operates. First, a description of the CAPS and 
PSDL provides the reader with a greater understanding of the contribution that the 
Static Scheduler makes to prototype development. The Chapter concludes with a de- 
scription of the Kodivak translator generator, the Ada® programming language, and the 


hard real-time system model that were used in unplementing the Static Scheduler. 


B. COMPUTER AIDED PROTOTYPING SYSTEM (CAPS) 

The computer-aided rapid prototyping tool addressed in this thesis which incorpo- 
rates a Static Scheduler is the CAPS. Recognizing that available prototvping method- 
Ologies require extensive amounts of individual time and effort, CAPS is designed 
specifically as a development tool for hard real-time systems. Its primary objective ts 
development of a specification method for identifying and later retrieving reusable soft- 
ware components from an online database while utilizing a formal prototyping language. 
Together with an iterative process similar in concept to Figure | on page 4, CAPS will 
provide an effective and efficient tool for constructing and validating a prototype. 
[Ref. 4: pp. 1-2] Rapid construction of this prototype relies on the applicable proto- 
typing method and on a support environment which automates the steps involved. The 
following sections and Figure 2 on page 8 describe the components of the CAPS archi- 
tecture and how they work together to make computer-aided rapid prototyping possible. 

1. Components of CAPS 

CAPS is inittalized through the User [Interface (U1) as the user and designer 
work together tn defining the critical attributes of the envisioned svstem. The Uf con- 
sists of a syntax-directed editor for the formal prototyping language and a graphics tool 
for displaying data flow diagrams. The editor eliminates syntax errors by prompting tlic 


designers with appropriate alternatives at cach step of the design process. Tlie graphics 
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igure 2. CAPS Architecture 


tool provides a picture of the data flow diagrams which reinforces the verbal description 
of the svstem specifications. [Ref. 6: pp. 6-7] 

The Prototype Svstem Description Language (PSDIL) was designed as the pri- 
miurv connection between the designer and the remaining components of CAPS. By 
definition, PSDL ts a high-level prototyping language with special features appropriate 
for defining critical real-time constraints and 1s applied at the specification or design 
stage. [Ref. 7: pp. 3, 23] In order to rapidly construct a prototype, PSDL also in- 


cludes its own associated prototyping method and automated support environment. 


Using a top-dewn design approach, the PSDL method aids the designer in systematically 
refining and decomposing each eritical component into its lower level components. 
Uniform PSDL specifications assocrated with each lower level description act as tem- 
plates for retrieving reusable software components having simular specifications from the 
mis soltware Database. Lhus, the PSDL method produces a computationai model 
consisting of the basic building blocks needed to desertbe the abstractions and coneepts 
of the hierarchically structured prototvpe. The PSDL execution support environment 
then verifies the design and the validity of the prototvpe’s real-time requirements. The 
actual execution of the prototype demonstrates whether these critical tinung constraints 
will perform in an acceptable manner that meets the timing constraints of the svstem as 
a Whole [Ref. 6: pp. 2-7]. A detailed description of PSDL appears later in this chapter. 


The CAPS Rewrite Subsvstem provides a means for automaticaily generatin 
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uniform specifications for each reusable software miodule in the CAPS Software Data- 
base and for each PSDL lower level component. Existing methods for retrieving reus- 
able modules are based on keywords. The [ewwrite Subsystem, however, uses an 
approach which allows the designer to give more precise PSDL specifications. The Ie- 
write Subsystem then transforms each specification into a uniform or normal form. This 
transformation is achieved by mapping a semantic alias to its normalized term as shown 
i Figure 3 on page 10. [Ref. 3: pp. 7-8] These normalized specifications are free from 
ambiguity and create a template used by the Software Design Management Svstem 
(SDMS) to retrieve software modules from the database with corresponding nortmalized 
specifications [Ref. 8: pp. 3-10]. 

The SDMS is similar to a database management system with additional features 
required for computer-aided design applications. The SDMS its responsible for organiz- 
ing, retrieving and instantiating the reusable software modules from the CAPS Database. 
Retrieval of reusable modules is supported by tle normasized specification templates 
described above. The SDMS tnstantiates these modules as specified by the desigier for 
execution of the current PSDL prototype. Overall, the SDMS supports efficient se- 
lection and retrieval of the relevant software modules. [Ref 3: p. 9) This minimizes 
instances Where a non-match requires manual ereation of a new software module before 
execution of the prototype occurs. 

Two distinct subdivisions of the CAPS Database are the Prototvpe Database 
and the Software Database. The first maintains and manages the PSDL prototypes 


along with their sets of requirements. It also records successive refinements of the 
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Figure 3. Normalizing a Specification 


prototvpe alternatives. This process includes facilities for backtracking to previous 
versions or for combining successive design decisions from the different alternatives. 
(Ref. 5: p. 10] The Software Database contains the reusable software modules togericr 
with their PSDL normalized specifications. This database allows future growth as new 
modules are identified for melusion into the database. 

The ESS, although a component of the CAPS architecture, actually provides the 
execution support environment for the PSDL prototyping inethod. After assembling a 
prototype of the envisioned system, the three ESS subsystems provide the capability to 
demonstrate the prototype’s actual performance. One subsystem, the Static Scheduler, 
reads the PSDL prototype source program to identify and extract the PSDL operators 
with their tuning constraints and precedence relationships. For operators with critical 
tinung constraints, the Static Scheduler creates a static schedule, if'a feasible one exists; 
guaranteeing ther accurate execution using Worst case time scenarios. A second sub- 


system, the Translator, also reads and translates the PSDL prototvpe source program 


to augment implementation of atomic operators and data types with software code. The 
Translator accomplishes this by communicating the PSDL prototvpe’s specifications to 
the SDMS and assembling the executable prototvpe from the reusabie software modules. 
The final subsystem, the Dynamic Scheduler, maintains run-time execution control of 
the prototvpe using the completed static schedule. The Dynamic Scheduler must also 
schedule operators without critical timing constramts during anv excess time slots that 
remain after each time critical operator completes execution. [Ref. 4: pp. 6-7] These 
subsvstems, and specifically the Static Scheduler, are described in detarl in Chapter III 
of this thesis. 
2. Prototype Development with CAPS 

Development of an executable prototype with CAPS requires an improved 
modular design which supports retrieval of reusable software modules and an automated 
support environment which miumizes the designer’s manual involvement in searching 
for and retrieving the appropriate software modules. The individual CAPS subsvsters 
that provide these automated capabilrtres are shown in Figure 2 on page 8 and are de- 
scribed in the previous sectron. Figure + on page 12 illustrates the process that the de- 
signer uses to interact with the CAPS to develop a prototype. 

Initially, the user and the designer jointly determine the specifications of the 
envisioned software svstem. The Rewrite System then normalizes these specifications in 
order to formulate the database queries. The SDMS utilizes these normalized queries 
to search the Software Database for reusable modules with matching normalized spec- 
fications. This search results in either a single match, multiple matches, or no match. 
Assuming only one match, the SDMS retrieves the applicable module. When multiple 
matches occur, the designer manually intervenes to select the most appropriate module 
for this prototype. After all required modules are stmilarly retrieved, they are assembled 
to create the executable prototype. 

In cases where no match occurs, the designer can either hand code a new mod- 
ule or decompose the PSDL component. The first option generates a unique module 
required for this prototype. When the current development iteration is complete, this 
new module is included in the CAPS Software Database. The second option requires 
manual decomposition of the composite component into atomic lower level PSDL 
components. After establishing individual specifications, the designer reenters each new 


component into the development process starting with the Rewrite System. The system 
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Figure 4. Prototype Development with CAPS 


also retains the relationships between decompositions to insure accurate assembly of the 
retrieved modules during the final stage. (Ref. 3: pp. 4, 16] 
3. Prototype Svstem Description Language (PSDL) 

The design of PSDL as a high-level prototvping language associated wath@a 
rapid prototvping method was specifically influenced by requirements for representing 
complex, real-time systems. In order to produce a reasonable prototype, PSDL includes 
the following design requirements: 


l. PSDL language and method are simple and easy to use. 


ee evctedics dm excCurabic prototype. 


3. PSDL supports a hierarchically structured prototype which sunplifies the 
prototyping process. 


4. PSDL supports retrieval of reusable modules from a database using precise 
specifications. 


wn 


PSDL uses a computational model that explicitly identifies interactions 
between components which encourages modularization. 


6. PSDL contains functional, data and control abstractions for representing 

the critical timing constraints of operators. [Ref. 6: p. 10] 
The PSDL prototyping method encourages a top-down design strategy that focuses the 
designer’s attention on the critical areas or attributes only of the system. An iterative 
process decomposes and refines these critical clements, using PSDL abstractions to hide 
lower level programming details. Working together within the execuuon support envi- 
ronment, the PSDL language and method produce a modularized computational model 
that contains the necessary tinung constraints to sunulate the critical portions of the 
envisioned system. The following sections explain the structure of the computational 
model and describe the use of PSDL abstractions. Appendix A includes a complete 
listing of the PSDL grammar. 

a. PSDL Computational Model 

The PSDL language constructs and modular design rely on a computational 

model of the system which contains operators communicating via data streams. Math- 


ematically, the computational model is an augmented graph such that 


Greer, bv), Cv) 


where V equals the set of vertices (operators), E equals the set of edges (data streains), 
T(v) equals the maximum execution time for each vertex (v), and C(v) equals the set of 
control constraints for each vertex (v). Using the above components, the PSDL en- 
hanced data flow diagram represents a directed graph of the critical aspects of the envi- 
sioned software system, including both the timing and control constraints. 
[Ref. 9: pp. 8-9] The following sections describe the four basic componerits of the 
auginented graph. 

(lj) Operators. PSDL operators represent either functions or state ma- 
chines. A PSDL operator fires when triggered by either the arrival of a set of input data 


Values or the arrival of a periodic timing constraint. When an operator fires, it reads 
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one data value from each input stream und writes, at most, one Computed Gata aie 
onto cach output stream. The function operator computes an output value based on the 
current mput data values only. Since the state maclhune 1s a composite, cyclical operator, 
one of its data streams acts as a current state variable and controls the feedback loop 
of the sub-operators. Thus, the state machine computes an output value based on te 
current input data values and the current value of its internal state variable. 

PSDL operators are also identified as either atomic or coumposite. 
Atomic operators represent a single operation and cannot be decomposed further. 
Composite operators represent a network of data and control flow lower level operators. 
This network contains unplied precedence relationships between the sub-operators such 
that 


if the output from operator A ts input to operator B, 


then operator A must fire before operator B. 


Thus, a composite operator is decomposed into lower level representations while main- 
taining the required precedence relationships. (Ref. 9: p. 9] 

(2) Data Streams. PSDL data streams are communication links between 
two PSDL operators, the producer (output) and the consumer (input). Each stream re- 


presents a sequential flow of data values such that 


if data value A is generated belore dala value Be 


then A must be delivered to the next operator before B. 


This “pipeline” ordermg of operators is required for real-tune computations 
[etre Uretomeie 7 |: 

These data streams are designed as either data flow or sampled 
streams. A data [low streain, snmilar to a discrete data flow, guarantees that each Gaim 
Value on the stream 1s delivered and acted upon only once. The data value @oinpiies 
by the operator thus represents a unique operation. Data flow guarantees that data 
values are not lost or repeated by utilizing a first-in first-out (TO) queue. Tus format 
enforces strict timing relationships between the producer and consumer to isure that 
the queue does not overflow and that the consumer is not required to wait for input data 


values. 


A sampled stream, stnular to a continuous flow, guarantees that data 
values can be entered onto or delivered from a data stream as they are required by the 
operators. A sampled stream) does not require protection against lost or repeated values 
since only the most recent value is of interest. A sampled stream utilizes a single mem- 
ory cell which is updated whenever the producer generates a new data value. This for- 
haat does not require strict tinting between the operators suice a producer can generate 
new values whenever or as often as the consumer requires. [Ref. 9: pp. 10-12] 

(3) Timing and Control Constraints. When considering prototypes for 
hard real-time systems, the timing and control constraints for operator firing and exe- 
cution are critical. Within the computational model, each time critical operator mcludes 
a Maximum execution time which gives the worst case time to complete execution once 
the operator fires, Critical operators can also include couditional control constraints 
that act as guards. These guards stipulate firing conditions for an operator, conditions 
necessary before computed values are output onto data streams, or exception situations. 
Bret. 6: p. 25} 

b. PSDL Abstractions 

The PSDL language supports three types of abstractions that assist in de- 
veloping a simplified but flexible model of the critical properties of a complex systen.. 
The operator, data type and control abstractions represent the major building blocks for 
constructing the PSDL prototype. 

(1) Operator Abstractions. PSDL operator abstractions represent either 
functional or state machines. Each operator has a PSDL specification and tmplemen- 
tation section. The specification section contains attributes which describe interfaces to 
other PSDL components, formal and informal descriptions of the operator’s observable 
behavior, and information required for creating queries to retrieve the reusable modules 
irom the software database. Specilically, each set of attributes contains generic pa- 
rameters, input, output, states, exception and timing information as shown in Figure 5 
on page 16. Only state machine abstractions melude the states information, which 
identifies the state variable and assigns its initial value. 

The operator nmplementation section indicates whether an operator 
abstraction is atomic or composite. An implementation for an atomic abstraction con- 
tains a keyword which specifies the programming language and the name of the retrieved 
reusable module that implements this operator. An tnplementation for a composite 


abstraction contains a set of attributes which includes graph, internal data, control 


OPERATOR brain_tumor_treatment_system 
SPECIFICATION 
INPUT patient_chart: medical_history, 
treatment_switch: boolean 
QUTPUT treatment_finished: boolean 
STATES temperature: real 
INET PAIN oy ao 
DESCRIE DION 
{ The brain tumor treatment system kills tumor cells 
by means of hyperthermia induced by microwaves. 


END 





Figure 5. PSDL Operator Seeciication 


constraints and an informal description of the operator's observable behavior. 
Figure 6 on page [7 provides an example of a composite abstraction. The PSDL graph 
uulizes an enhanced data flow diagram which is based on the PSDL computational 
model’s augmented graph. The PSDL graph combines operator specification and im- 
plementation information to graphically describe the operator’s abstractions and imter- 
Picea ch 9 Somes) 

(2) Data Type Abstractions. PSDL data type abstractions provide a 
means to distinguish between the prototype’s partial representation of critical operators 
and the operators’ actual behavior in the envisioned systeni as a whole. The PSDL 
prototype language enforces strong typing by requiring that both pre-defined and user- 
defined data types be immutable. This rule encourages the designer to clearly and ex- 
plicitly define an operator’s type within the context of ihe prototype, ignoring 
unnecessary details. Possible data types include the subset of Ada® pre-defined types, 
user-defined abstract tvpes, PSDL type constructs, and the PSDL special types sie 
and EXCEPTION. These tnumutable data types result in two important considerations 
when developing prototypes for complex systems: 

e No unphicit communication occurs between operators. 
* Common interfaces improve comparison with the envisioned system during vahi- 
dation of the prototype. 
Each data type has a PSDL specification and implementation section 


similar in content and format to the operator abstraction. [Ref. 9: pp. 13-16] 
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TEMPERATURE TREATNENT_POUER 
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DATA STREAM treatment_power: real 
CONTROL CONSTRAINTS 
OPERATOR hyperthermia_system 
PERIOD 200 BY REQUIREMENTS shutdown 
OPERATOR simulated_patient 
PERLopeZoC 
DESCRIPTION { paraphrased output } 


END 


Figure 6. PSDL Operator Implementation 


Figure 7 on page [8 and Figure $8 on page 19 provide examples of a data type specifi- 
cation and implementation. 

(3) Control Abstractions. VPSDL control abstractions provide a means to 
explicitly describe the periodic execution of operators. These abstractions are repres- 
ented as a set of control constraints within the PSDL implementation graph of each 
@eerator. The actual or scheduled order of operator execution is determined by the 
Static Scheduler. The Seheduler utilizes these constraints to recognize the precedcnee 
relationships between the enhanced data flow diagrains of the operators. Control con- 
Straints include data triggers, periods, conditionals, 1IMER and EXCEPTION. 

The primary control constraints that affect all PSDL operators are 
the data trigger and the operator’s period. All operators must have either a period ora 
data trigger, or both. The period indicates periodicity of execution for an operator while 


a data trigger indicates the firing frequency of an operator. Firing frequency can be 


TYPE, tedicalenistery 
SPECIFICATION 
OPERATOR get_tumor_diameter 
SPECIFICATION 
INPUT patient_chart: medical_history, 
tumor_location: string 
OUTPUT diameter: real 
EACEPI TONS» no” cunor 
MAXIMUM EXECUTION TIME 5 ms 
DESCRIPTION 
{ Returns the diameter of the tumor at a given location, 
produces an exception if no tumor is at that location. 


END 


4 


KEYWORDS patient_charts, medical_records, treatment_recor 
lab_records 
DESCRIPTION 
{ The medical history contains all of the disease and 
treatment information for one patient. The operations 
for adding and retrieving information not needed by 
the hyperthermia system are not shown here. 





Figure 7. PSDL Data Type Specification 


either periodic (synchronous) or sporadic (asynchronous). Periodic operators are 
triggered at approximately regular intervals which insures that execution is completed 
between the beginning of each period and its deadline, which defaults to the end of the 
period. Sporadic operators are implemented by their periodic equivalents which are 
triggered by the arrival of new data values. The following examples illustrate the PSDL 


data triggers and their interpretations: 
* OPERATOR s TRIGGERED BY (NU xz 
* OPERATOR ¢ TRIGGERED By SO. laa 


The first example means that $ 1s ready to fire whenever new data values arrive on all 
three input streams x, y and z. The second exainple means that q is ready to fire when 
any one of the data values a or b arrive. 

Conditional constramts deseribe the execuuon and transnussion re- 


quirements for the input and output data streams of an operator. Conditional execution 


IMPLEMENTATION 
tuple[tumor_desc: map[from: string, to: real], ... 
OPERATOR get_tumor_diameter 

IMPLEMENTATION 

GRAPH 


PATIENT_CHART 
TUPLE . GET_TUNOR_DESC 


MAP. DIAMETER 
TUMNOR_LOCAT ION ae 


DATA STREAM td: tumor_descr 
CONTROL CONSTRAINTS 
OPERATOR map. fetch 
EXCEPTIONS no_tumor IF not(map. has(tumor_location, td)) 


END _ 





Figure 8. PSDL Data Type Implementation 


of an operator requires an IF predicate along with the data trigger. This conditional 
predicate must be satisfied before the operator is triggered and execution begins. Con- 
ditional transmission of an operator’s output requires an IF predicate. This condition 
must be satisfied before an operator can output a data value. The following examples 
illustrate how these constraints appear in the PSDL implementations: 

me rerRewiOR x TRIGGERED IF v: critical 

eee LIOR x OUTPUT zif tf < zandz < max 


Where x ts the operator_id, v is the mput data streain value and z is the output data 
Stream Value. 
The TIMER represents a unique tvpe of state machine which func- 


tions similar to a stopwatch. An operator TIMER can be used to record the length of 


tiie between events or the length of time speut in a given state. Control of the TI MEIN 
is local to the component, whether atonuc or composite, in which it 1s declared. Only 
the TIMER value can be transnutted via a data stream to outside of the localyconmimmms 
nent. TIMER utilizes four primutive operations wluch include READ the current value, 
START the timer, STOP the timer and RESET the tinier witha vali@escaua stones 
EXCEPTION represents unique srtuations that are either SvStemmmem 
user-defined. The underlying operating svstem raises a svstem-defined EXCEPTION 
when eXtraordinarv situations preclude continued execution of the program. A user- 
defined EXCEPTION alerts the prototype demonstrator to situations that indicate crit- 
ical timing or control constraints were not satisfied during execution. For exainple, the 


control constraint 


OPERATOR d EXGEPT lO MRS = aly) 


transmits the EXCEPTION named f on the output streams of d instead of the value 
computed by dif the value of ¢ 1s ereater tham 10) (ici. 9 ope 

(4) PSDL Timing Constraints. VWlard real-time systeins differ from lus- 
torical systems primarily due to timing constraints which control proper execution of the 
system. Control in this context refers to the critical timing relationships between the 
operators. The three fundamental trmmg constraints are maximum execution time 
(MET), maximum respouse time (MRI), and minnnuna calling period (AJCP). The de- 
signer specifies these critical constramts, using Worst case time sceiarios, in the PSDL 
specification and implementation sections of the PSDL module. 

Withm the PSDL specification section the designer specrlies one or 
more of the above three constraints depending on Whether the operator 1s periodic or 
sporadic. All time critical operators require an MET which specifies an upper bound 
on the length of time between that operator’s execution untiation aud its conipletion. 
Ilowever, the MET does not include additional time for potential executron scneduling 
delays. <Any operator may also include au MIR VT constraint whose interpretation dillers 
slightly depending on the type of operator. Tor penodic operators, MRT specifics the 
upper bound on the amount of tline between the beginning of a period and the instauce 
of time when that operator places the last computed data value outo its output streaus 
during that same period. For sporadic operators, MRT specifies an upper bound on the 


amount of time between the arrival of a new data value, or set of data values, and the 





instance of time When that operator places the last computed data value onto its output 
streams, in response to the arrival of a new data value or set of data values. [n both 
cases, MRT considers and includes potential execution scheduling delays. Any sporadic 
Operator with an MRT requires an MCP. The MCP specifies a lower bound on the 
amount of trme between the arrival of one set of input data values and the arrival of the 
next set for that operator. Thus, the MCP indicates the Ininimum amount of time that 
must elapse between firings of the sporadic operator. 

Within the PSDL unplementation section the designer specifies the 
less straightforward or implicit tuning constraints. These constraints include the PSDL 
constructs for event controlled timers, triggering and output conditions. A PSDL 
TIMER controls execution of an operator by maintaining the timing functions required 
to support the conditional specifications for that operator. Triggering and output con- 


ditions contro! operator execution by enforcing conditional requirements which must be 


mee ocfore firing Of of output by that operator can occur. [Ref. 9: pp. 23-24] 


C. KODIYAK TRANSLATOR GENERATOR 

Utulization of CAPS during rapid prototyping of hard real-time systems produces a 
PSDL prototype source program of the envisioned software svstem. The ESS’s Static 
Scheduler must identify and extract the critical operators and their associated timing 
constraints from this PSDL source program before creating the static schedule. The 
Kodiyak automatic translator generator is the tool which provides the Static Scheduler 
with the capabilitv to process the PSDL source program. This section begins with a 
general description of the Kodivak tool and concludes with its specific application for 
the Static Scheduler. 

Kodtyak is an attribute grammar (AG) based tool which automatically generates a 
translator. The AG approach provides a way for the designer to assign meanmgs to 
each input string in a context-free manner. Thus, the AG-based source code contains 
application specific grammiar and attribute equations written in Kodiyak. The compiled 
output is a translator in C language. The translator parses each input string and places 
its translation in a derivation tree whose structure ts based on the specified equations. 
ierewsitucture of the tree, therefore, provides the meaning for each string. The three 
sections of the Kodivak AG tool are described briefly in the following paragraphs and 
are illustrated in Figure 9 on page 22. Detailed information on modifying this tool for 


a specilic application are found in References 11 and 12. 
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ie Vexical Scanher 

As the initial section of the translator, the lexical scanner contains a list of 
statements which describe each named ternunal svinbol of the target language as shown 
in Figure 9 on page 22. The primary function of these statements is to define a set of 
regular expressions which represent expected text within the input source programm. As 
the translator reads the input prograin, the lexical scanner sequentially locates regular 
expressions that match terminal svmbols. When a match occurs, the mput text is deleted 
and is replaced with the ternunal symbol. [Ref. Li: p. 3] 

2. Attribute Declarations 

The second section of the translutor, the attribute declarations, contains a list 
of staternents which further describes both terminal and non-terininal grammar symbols 
as Shown in Figure 9 on page 22. Each statement names the attribute associated with 
a grainmar symbol and defines the attribute’s type, either string or integer. String types 
have arbitrary length and may be concatenated. The range of integers depends solely 
on local machine capabilities. Most non-terminal symbols require an attribute declara- 
tion while named terminal symbols, such as ID, are included only if necessary for accu- 
fate translation. {Ref. 11: p. 7-9] 

3. Attribute Grammar 

The fmal section of the translator, the attribute grammar, contains a list of 
statements as shown in Figure 9 on page 22 which define the syntax and semantics of 
the target language as a grammar tree. Each statement defines a grammar symbol as a 
combination of root symbols using associative attribute equations. Items to the lelt of 
the colon represent the grammar symbols while expressions to the right of the colon 
represent the grammar’s syntax followed bv attribute definition equations in { braces }. 
In the example used, a translation might be MET 9 MICROSEC. If the input text 
sored 9 MS, then the translation would be MET 9,000 MICROSEC. 
[Ref. Ll: pp. 9-10] 

In this thesis, the Kodiyak tool is specifically tailored as a PSDL processor for 
the Static Scheduler. The AG source code contains those specific PSDL grammar and 
attribute equations written in Kodiyak which define the critical operators and their 
tuming constraints and precedence relationships. The compiled C language processor 
then locates and extracts operators and timing information from the original PSDL 


source program that are required by the Static Scheduler. Chapter IV contains a 


By 


detailed description of the PSDL grammar and attributes that were modified specifically 


for the Statice Scheduler. 


D. ADA PROGRAMMING LANGUAGE 

Trom the plethora of computer programming languages available and familiar to 
software programuners, the designers of CATS selected Ada® as the most appropriate 
programnung language. Two factors reinforced their selection: 


1. DOD’s efforts to standardize software, and 


2. Ada®’s constructs for representing complex and embedded software systems. 


With the increased demand for complex real-time systems, the DOD recognized that the 
design and management of these systems required a new development approach. DOD 
initiated development of a programming language incorporat'.5 1ew software engineer- 
ing principles and including capabilities designed specifically for coinplex systems. ss a 
result, implementation of CAPS in Ada® will provide a computer-aided rapid prototvp- 
ing tool compatible with and directly related to the development of future complex 
software systems. [Ref. 1: pp. 3-4] 

Early Ada® designers recognized that complex software systems required parallel 
processing, real-time control, exception handling, and uurque input/output (1, O) control 
[Ref. I: p. 16}. From these basic requirements the designers identified a programming 
stvle and its associated language constructs that are fundamental to the development of 
coniplex systems containing critical tinung constraints. s\t the highest level, the recoin- 
niended programnuing style includes conventions for orgauizing program uuits and for 
naming entities. Proper use of Ada®’s program, task and package units insures a mod- 
ular design supported by separate compilation of individual units and by data ab- 
stractious. The preferred Ada® naming conventions for all user-defined entities create 
software code thut is easily understood and self-documenting. The Ada®programmung 
language includes a pre-defined lauguage environment that contains extensive data 
tvpes, calendar/timing functions, system exceptions, and several levels of I, O operatious. 
[lowever, Ada®programmung principles also stress user-defined data twpes, exceptions, 
and | O operatious to insure precise implementations and cousistent, self-documenting 
Code. 

At a lower level, Ada® constructs for task program units contaimimg rendezvous 
Operations are integral concepts for prototyping real-time systems. The rendezvous 


constructs ENTRY and ACCEPT provide expheit synchronization between two parallel 


tasks, supporting both concurrency of operation and precedence relationships between 
time critical operators. {ustantiation of generic program tuits provides the necessary 
environment for creating the prototype’s abstract representation of the envisioned svs- 
tem. Chapter IV of this thesis describes the application of these constructs during im- 


plementation of the Static Scheduler. 


EK. HYPERTHERMIA MODEL 

During the initial conceptual research for the CAPS [Ref. 6], the hyperthermia svs- 
tem was used as a model for studying a hard real-time system. This model provides a 
dynamic environment with critical timing constrauits, but is also sinall enough to easily 
understand and manipulate. The hyperthermia system is described as 

. a medical device for treating tumors .. . which uses a microwave generator con- 
nected to a fine tuner and matching coutrol svstem. the livperthermia svstern uses 
microwave energy to produce and deliver controlled local therapeutic heating di- 
rectly to tumors for effective and safe treatinent of cancer. A computerized control 
systein adjusts power output automatically to maintain the therapeutic temperature 
in accordance with the established patient treatment plan. [Kef. L3: p. [1] 

For the hyperthermia system, the designer must determine which subsystems and 
attributes are required by the prototype to accurately simulate tlie envisioned system. 
The designer of a prototype would only be concerned with subsystems that receive 
temperature readings from sensors and that generate commands to modify or terminate 
the treatment. The following critical requirements [Ref. 13: p. 13] were identified: 

1. Power must drop to zero within 300 ms after turning off the system. 
2. Temperature must remain between 42.2 and 42.6 degrees centigrade. 


3. Temperature must never exceed 42.6 degrees centigrade. 


System must stabilize within 5 minutes after starting treatment. 


tp 


On 


System must shutdown automatically when the temperature 1s above 42.4 degrees 
centigrade for 45 minutes. 

The resulting PSDL prototype for the hyperthermia system, based on the above re- 
quirements, 1s presented m Appendix B. Sections from this sample prototype program 
are used throughout this thesis to clarify an idea or provide examples for the imple- 


mentation, 


bo 
LA 


Hl. STATIC SCHEDULER CONCEP UA 7 


A. INTERNAL ENVIRONMENT 

Chapter [I of thus thesis described CAPS as an effective and ellicient tool for -emaam 
ing an executable prototype of a hard real-time system. Rapid construction and vali- 
dation of a prototvpe require an execution support environment that automates the 
many time-consuming tasks involved with developing the design up through analyzing 
the performance of the prototype. Although the ESS represents only one component 
of the CAPS prototyping tool, it is the primary factor that differentiates CAPS from 
nianual prototvping tools. The ESS provides automated control and iiterface capabili- 
ties that allow the svstemn to save current state information when run-time discrepancies 
are noted and to exccute modified versions of the prototype. [Ref 6: p. 7)) Titeseuaae 
pabiliuies are essential to realize time and cost savings and to increase user confidence 
that the system’s design 1s feasible. 

The ESS contains a Dynamic Scheduler, a Stauc Scheduler, and a Translator 
conceptualized by the author for this thesis, Figure 10 on page 27 illustrates the ESS 
subsystems’ external interfaces to other components of CAPS and the interactions 
within the ESS itself. The ESS utilizes four external interfaces from outside the ESS. 
Initially, a conimand from tlre UI to the Dvnanue Scheduler activates the ESS when the 
designer requests execution of the PSDL prototype. Second, the Translator and the 
Static Scheduler require access to the PSDL prototype source program created jomtly 
bv the designer and the user. Third, the Conibiner Linker Exporter (CLE) receriaa 
compiles and links the Ada® source code from the Translator and the Static Scheduler. 
The executable code generated by the CLE becomes input to the Dynamie Scheduler for 
run-tine execution. Tlie final interface from the Dynanue Scheduler to the UI provides 
prototype cxecuuion statistics, wnalysis and error message information direct to the de- 
signer. 

The first objective of this Chapter is a description of the ESS subsystems. «A brief 
litroduction to the basic functions of the Dynamic Scheduler and the Translator pro- 
vides a general survey of the execution environment. Emphasis is placed on the imter- 
faces between each of these subsystems and especially with the Static Scheduler. The 


primary objective of this Chapter is to provide a detailed description of the Statice 
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Figure 10. Execution Support System Interfaces 


Scheduler. This description covers the functions and responsibilities that the Static 
Scheduler must accomplish to create a static schedule for time critical operators. 
1, Dynamic Scheduler 
The conceptualized design for the Dvnamic Scheduler utilized in this thesis de- 
rives directly from Reference 14 and as initially conceived in Reference 4. The Dynamic 
Scheduler fulfills two major roles for the CAPS. First, the Dynamic Scheduler exercises 
the prototype which is a fundamental requirement of a rapid computer-aided prototyp- 


ing system. Second, prompt feedback from the Dynamic Scheduler to the UI allows the 


designer and the user to assess the prototvpe’s execution performance. In order to per- 
form these roles, the Dynanuc Scheduler coordinates the lunetions ol ie entwtemeas 

In its first role, the Dynaimic Scheduler acts as the primarv link between the 
CAPS UI and the ESS. When the designer completes the PSDIL prototype sourcemames 
gram, a request froin the UI (or a potential subsvstem of the Ui) to execute thea 
prototype is received by the Dynanuc Scheduler. The Dvnanue Scheduler in time 
vokes the Translator and the Static Scheduler, and initiates procedures which pre-load 
data stream buffers for the Translator. The Translator transforms the PSDL prototype 
program into an executable Ada® program while the Static Scheduler provides a linear 
static schedule for time critical operators. An Ada®-compiled implementation of the 
prototype then becomes an input to the Dynamic Scheduler. After successful com- 
pletion of these pre-execution functions, the Dynamic Scheduler provides all run-time 
executive activities while exercising the prototype. 

As the ESS driver program, the Dynanuc Scheduler hus two main responsiobil- 
ities. First, it schedules operators without timing constraints that were not included in 
the static schedule. The Dynamic Scheduler receives an input file fron tlremseaae 
Scheduler containing these unscheduled operators. Since the Static Scheduler uses worst 
case times (MIETs) for scheduling the critical operators, on the average these operators 
will not utilize the entire ailotted time slots. The Dynamic Scheduler identifies this spare 
capacity as it occurs and schedules operators without trming constraints during the time 
remaining. In some cases the operators so scheduled may not complete execution during 
this time slot. The Dynamic Scheduler must then preempt the operator’s execution and 
abandon the entire operation before the next pre-scheduled critical operator must begin 
execution, 

The second ESS responsibility of the Dynamic Scheduler provides run-time ex- 
ception handling and hardware, operator interrupts. EXCEPTIONS are raised from the 
Translator as either dataflow overloads when an operation attempts to write to a bufler 
that is full or dataflow underloads when an operation attempts to read from an empty 
buffer. EXCEPTIONS are ratsed [rom the Static Scheduler when @ critieallopertoness 
ceeds its worst case (MEET) ume slot or validity checks on constraiit values @idicamees 
static schedule is not feasible. Inn all of these cases, execution of the prototype will stop 
wid an applicable error message is displayed ut the Ul. The Dynamic Scheduler maimst 
also handle conventional interrupts, such as a <cr>C from the user to abort execution 


or an equipment failure. 


Future enhancements identified in addition to the current Dynamic Scheduler 
design would provide debugging capabilities and staustical formation. During cxe- 
cution of the prototype, the debugging capabilities would trace relevant information 
concerning operator execution. Computed values and their associated input and output 
times would display a record of events that occur during execution. Staustical inforima- 
tion collected during execution would include frequency of operator firing, quantity of 
EXCEPTIONS occurring, and statistical data on timing parameters for critical opera- 
tors. [Ref. 4: pp. 10-11] When combined, these two enhancements would provide the 
designer and the user with precise information for measuring, analyzing and validating 
the prototype’s performance. 

2. Translator 

The conceptualized design for the Translator uthized in this thesis derives di- 
Pectly {rom Reference 12 and as initially conceived im Reference 4. The Translator’s 
primary responsibility is the translation of the PSDL prototype source program into an 
executable Ada® programm that simulates the behavior of the prototype. The Translator 
accomplishes this translation by utilizing a version of the Kodiyak translator generator 
specifically tailored for this application. The Translator invokes the AG translator pro- 
gram Which semantically parses the PSDL prograin statements into their Ada® program 
representations. The translator contains a list of PSDL grammar statements with their 
associated attribute definition equations that represent the corresponding Ada®gram- 
mar. These equations define the semantics of the translation using a structured grammar 
tree approach. 

Augmentation code for PSDL atomic operators is embedded within the atiri- 
bute definition equations. These augmentations implement the PSDL data streains, 
PSDL operator conditional constraints and PSDL TIMER functions. Both sampled and 
data flow stream augmentations are implemented with individual bufTers contatmmg one 
computed value for each stream. PSDL operator triggering conditions and output 
guards are implemented by the equivalent Ada® semantics. A PSDL TIMER is imple- 
mented using the CLOCK function from the standard Ada® library package CALIEN- 
mk. 

Durmg the early prototype design phase, any PSDL composite operators are 
decomposed mto atomuc operator networks. Reusable modules (rom the CAPS Data- 
base, considered as Ada® prograin units for this thesis, are inserted as the tmplemenita- 


tion code for these operators. The augmentation code described above, combined with 


these Ada® implementations. produces the prototvpe’s Ada® souree code. The CLE 
compues this source code and links it with the compued static schedule to generate the 
executable Ada® program. This executable program then becomes thie input to the 


Dvynanuc Scheduler for execution of the prototype. 


B. THE STATIC SCHEDURs 

The conceptualized design for the Static Scheduler utilized in this thesis deriyasueee 
rectly from Reference 15 and as initially conceived in Reference 4. The primary devel- 
opment emphasis for CAPS was computer-aided rapid prototvping for hard real-time 
systems. bv automating many of the time-consunung tasks of conventronal rapid pro- 
totvping tools, the ESS and the SDMS differentiate the CAPS from its inanual or semi- 
automated counterparts. But the Static Scheduler subsystem of the ESS alone represeuits 
the single most .mportant component of CAPS as the basic requirement for coimputer- 
aided rapid prototyping of hard real-time systems. The State Scheduler specificaily ad- 
dresses onlv those operators with critical timing constramts whose precise performance 
deternune whether the system, as designed, will meet the required timing specifications. 

As conceptualized, the primary purpose of the Static Scheduler 1s creation of a static 
schedule which gives the precise execution order and timing of operators with hard 
real-time constraints in such a manner that all timing constraints are guaranteed to be 
met [Ref. 4: p. 7]. Assuming that such a schedule ts feasible given the system specttt- 
cations, the static schedule contains the pre-allocated starting time and execution time 
for each critical operator. This structure implicitly denotes the precedence relationships 
between the operators. Without the benefit of a Static Scheduler, execution of the pro- 
totype would rely on basic control flow and processor scheduling as currently utilized in 
the majority of software systems. Rapid prototyping m general would benefit from 
CAPS without a static schedule. [lowever, the Static Scheduler provides CAPS withtie 
unique capability required to realize increased gains in designer productivity and system 
rehabilitv during development of hard real-ume systems. 

The remainder of this Chapter provides inplementation guidelines describing how 
the Static Scheduler functions as conceptualized in Reference [5 and bv this author. 
The implementation design in this thesis addresses a single processor application only. 
Jhe impact on or modification to this design when miulti-processors and concurrent 
processing are uulized will not be addressed explicitly. Data Flow Diagrams (DI-Ds) in 
Appendix C illustrate the conceptualized design for implementation of the Static 


Scheduler. The Ist level DI-D presents a general descriptionsof the Static Scheqimien 


gee — 


while the lower level DI'Ds contain more specific implementation guidelines. The cur- 
rent discussion addresses the Ist and 2nd level DI'Ds and outlines assumptions that were 
made to define the scope of the implementation guidclines. 
1. Static Scheduler Ist Level DFD 

The Ist Level DFD in Appendix C outlines the five major functions of the 
conceptualized Static Scheduler [Ref 15]. The mutial input to the Static Scheduler is a 
text file containing the PSDL prototype program created jointly by the designer and the 
user. An intermediate output to the Dynamic Scheduler is a text file contamuing the 
non-time-critical operators that were extracted from the PSDL program together with 
the time critical operators. The final output from the Static Scheduler to the CLE is an 
Ada® source file containing the static schedule. The CLE compiles and hunks this pro- 
eram to the Translator’s compiled Ada® program. This combined prograin is the exc- 
cutable Ada® program used bv the Dynamic Scheduler to demonstrate the prototype’s 
performance. The following sections describe the functions performed by each compo- 
nent of the Ist level DFD and, in the process, provide an introduction to the lower level 
DFDs. 

a. “Read_PSDL” 

Following initiation by the Dvnanuc Scheduler, the Static Scheduler’s first 
major functions reading and processing the PSDL prototvpe program. Although the 
Translator performs a similar but extensive process for the entire PSDL program, the 
Static Scheduler requires only that information which identifies critical operators along 
with their associated timing constraints and the link statements which syntactically de- 
scribe the PSDL graphs. A specifically tailored version of the AG-based Kodiyak tool 
for the Static Scheduler identifies and extracts this information only from the PSDL 
source program. This process creates a sequential text file containing operator identifi- 
ers, timing information and link statements. 

As conceptualized, implementation of the current design is based on two 
assumptions. [irst, this design assumes that the PSDL prototype program is 
syiutactically correct. This implics that each line begins with a PSDEL kevword or 
reserved word. Second, this design assumes that the designer structured the PSDL 
prototype program using a top-down design. This unmphes that the program begins with 
the highest level and then decomposes all composite operators, with the last (or lowest) 


leve! being the Ada® implementation modules. These assumptions are realistic in that 


| 


PSDL encourages the designer’s use of a struetured, modular architecture and also that 
the UT will include a svntax-direeted editor. 
b. “Pre-Process_Tile” 

After the AG processor creates the output text file, the Statice Seheduler’s 
next major function is sorting the contents of this file and performing basic validity 
checks on pertinent mformation. The input text file is a sequentially ordered file con- 
taining all required information as it was extracted from the PSDL program. Thus in- 
formation must be divided into three separate files based on its destination or additional 
processing required. The Non-Crits file contains a sequential list of all non-time-eritical 
operator identifiers which becomes an intermediate input to the Dynamic Scheduler. 
The Dynamic Scheduler schedules these operators during execution of the prototype as 
excess tne becomes available. The Operator file contains all critical operator identifiers 
and their associated timing constraints. This file is organized as an array of records. 
Each record contains fields for the operator identifier and the numeric values of its MET, 
MIR T, MCP, period and FINISLI WITHIN, The Links file contains the link stavemmerin 
Which syntactically describe the PSDL implementation graphs. Tlus file is also organ- 
ized as an array of records. Each record contains fields for the data stream identifier 
which communicates between the two operators, the producer operator identifier and the 
numeric value of its MET, and the consumer (user) operator identifier. The derivation 
of these link statements appears in the section “Sort_Topological”. 

During this phase, the Static Scheduler also performs basic validity checks 
on the timing constraints contained in the critical operator file. At a minimum, three 
validity checks performed at this stage will increase the probability of creating a feasible 
schedule during the later stages. The first check verifics that an operator record con- 
taining an MCP value also contains an MIRT value. If the MERT 1s missing, it is calcu- 
lated as either ( MRT cquals FINISH WITITIN ) or ( MRT equals MET ). A second 
check verifies that an operator’s MET value dues not equal its period value, tf a period 
is present in the record. A third cheek verifies that an operator’s MET value is less than 
is MRT value. [Ref 16: p. 6] In all three cases, if any one of the checks failsiaiiaes 
CLOTION wil be raised and an appropriate error message submitted to the Uae 
significance of these validity cheeks will become apparent in the section for 
“Buiid_tlarmoniec_Blocks”. 

As conceptualized, implementation of the current design is based on two 


assumptions. Tirst, this design assumes that critical operators will always include an 
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MET value. If this value is not present, the operator is assumed non-time-critical and 
is delivered to the Dynanue Scheduler. Second, this desizn assumes that all timing con- 
stramts are non-negative integer values. These assumnptions ure realistic in that “critical” 
here implies maximum or minimum tinung constraints. [n addition, a negative time 
value would be meaningless and the time units available in PSDL (1c. mulle- or micro- 
seconds) provide sufficient tinte divisions. 

c. “Sort_ Topological” 

Putcmeunes Pie PrOcessmiane [UMetiOn Creates its output files, the Static 
Scheduler’s next major function is performing a topological sort of the lnk statements 
contained in the Links file. In order to appreciate the coinplexity of this topological 
sort, Figure Ii on page 34 illustrates a PSDL linear augmented graph and its corre- 
spouding sorted link statements. Lower case characters identify data streams which 
provide data value communication paths between two operators. The upper case cliar- 
acters identify the critical operators. An operator identifier appearing on the left side 
of the arrow represents a producer of data. An operator identilier appearing on the night 
side of the arrow represents a consumer (user) of data values. The special word LX- 
TERNAL identifies a sttuation where the data input/output arrives/exits the current 
level of the system under considcration depending on whether EXTERNAL ts located 
on the left/right of the lik statement. The numerical value on the night side of the colon 
records the MET value and unit of measurement for the operator identificr on the feft 
side of the colon. 

All link statements conform to this same format regardless of the level of 
decomposition under consideration. Ilowever, as these lower levels are encountered, 
each single statement could be replaced by or affect two or more statements. As am ex- 
aniple, Figure 12 on page 35 illustrates the decomposition of operator B froin 
Figure [1 on page 34. A comparison of the two figures indicates that two new state- 
ments were added: 


Sm . Bl: Sms --> B2 


® b2’. B2: 10ms--> B3 


and two statements were modilied: 
See ms --> 8 isnow b.A : 10 ins --> BI 


Mees 20 11S -->9C 1s now cc. BS: S ms--> C. 
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a.EXTERNAL --> A 
bA:10ms --> B 
C5: 20mms.- -- Fe 
dC: 10ms ~--> External 





Vigure Li. PSDL Graph and Link Statements 


All of the link statements from each level appear sequentially in the Links file as they 
Were extracted from the PSDE prototype program: 

The requirement for a topological sort implies that the statements being 
sorted have a natural continuity and connectedness. These properties define the exe- 
cution precedence of the time critical operators regardless of whether the graphs are h- 
near or acvclic. With a linear graph, the sort establishes a start point by locating the 
statement containing the EXTERNAL keyword in the left-hand operator position. 
Conversely, the end poimt is established by locating a statement containing the EX- 
TERNAL kevword in the right-hand operator position. The remaining operators are 
ordered by locating matches between the right and left-hand operators. Sorting an 
acyclic digraph differs onlv in how the start and end points are established. The acvelic 
sort establishes a start point by locating the statement(s) having a left-hand operator 


with no matching right-hand operator. The end point is established by locating the 
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Figure 12. Decomposition of Operator B 


Statement having a right-hand operator with no matching left-hand operator. An aug- 
mented acyclic digraph 1s illustrated in Figure 13 on page 36. In this type of digraph, 
a decision to choose the “a.A” link first and the “G.A” link last is arbitrary. The output 
from cither sort 1s a precedence list of critical operators stipulating the exact order in 
which they must be executed. 

AS conceptualized, iniplementation of the current design is based on two 
assumptions. First, this design assumes that the mk statements are formatted correctly. 
This assumption ts realistic here and especially in future designs when the UT contains 
u svyntax-directed editor. Sccond, although this design assumes a linear graph, the sort 
procedure will accommodate both linear graphs and acyclic digraphs. The linear sort 
Will produce one precedence list while the acyclic sort can produce two or more preced- 


ence lists. 
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Figure 13. PSDL Augmented Acyche Digraph 


d. “ Buald_ Harmonic. Blocks” 
‘ second output of the “Pre-Process File” function, the Operator filesismiie 
Input to the next major funcrion of building harmonic blocks. An harmonic block as 
defined in this thesis is a set of periodic operators where the periods of all its component 
operators ure exact multiples of a calculated hase period |Ref os: p> 7 
unplementauon design treats each harmomec block as an independent scheduling prob- 
lem. When this definttion is apphed to scheduling hard real-tume constraints, the design 


approach requires one processor for euch harmomic block. This approach utilizesmeime 
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capabilites of concurrency and inulu-processing which are normally a requirement for 
complex, hard real-time systems. The implementation used in this thests addresses a 
single-processor environment only. Therefore, the procedures uulized in geucrating the 
final static schedule assume that only one harmonic block is created. The following 
sections describe how sporadic operators are converted to their periodic equivalents, 
how the base period is calculated and how it relates to the harmonic block, and finally, 
how the harmonic blocks are created. 

The Operator file generated earlier contains all the critical operators with 
their mung constraints that were extracted from the PSDL prototvpe program. llow- 
ever, this file can initially contain both periodic and sporadic operators. Periodic oper- 
ators are triggered for execution at approximately regular intervals. The resultant 
triggering interval, or period, is the governing factor that identifies an operator as peri- 
odic. This periodicity heips insure that execution 1s compieted between the beginning 
of a period and its deadline, which defaults to the end of the period. In contrast, spo- 
radic operators are data-driven, ineaning that they are triggered by the urrival of a new 
data value or set of values. Attempts to create a static schedule with sporadic operators 
would prove difficult, if not impossible, especially when the objective ofa static schedule 
is guaranteeing execution of operators in a predictable manner. For this reason, spo- 
radic operators are implemented by their calculated periodic equivalent. 

The first preliminary step in creating a static schedule uses an algorithm 
[Ref. 4: p. 8] which calculates the periodic equivalent for all sporadic operators. Use 
of this algorithm requires that all sporadic operators (those without periods) lave valucs 
for MCP, MRT, and MET. If anv of these values are missing they must be calculated 
from the available information. The MRT value was computed during the 
“Validate_Data” function. This implementation assumes that MET is given for all ume 
critical operators and that either a period, an MCP, or both are also given for all critical 
Operators. This author interprets the latter as indicating that an operator with both 
values defaults to a periodic operator. The following relationships between these values 
must exit to calculate a valid operator: 

meviEl < MRT 
PeeevicP < MRT 
peeviEl < NiCp., 


The first condition insures that ( MRT - MET ) produces a positive value. The second 


condition is necessary, but it is not sufficient to insure a valid period. This condition 
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guarantees that an operator can lire at least ence before a response is expected. The last 
condition sures that the penod calculated will conform to a single-processor environ- 


ment. [Kef. 16: p. 6] The periodic equivalent is then caleulatedmas 


P = minimum ( MCP, MRT - MET ). 


The value of P must be greater than MET in order for the operator to complete exe- 
cution within the calculated period. If this test fails, a last resort is setting P equal to 
MCP as a worst case, or tightest, scheduling coustraint. 

After all operators are in periodic form, they are sorted in ascending order 
based on the period values. This sort assumes that all units of ttme measurement were 
previously converted to microseconds. A second preliminary step to creating the static 
schedule uses an algorithm which calculates the base block and its period for the sorted 
seyuence of operators. Within this thesis, the base period is defined as the greatest 
comunon denoimimator (GCD) of all operators in one sequence (or block) that will be 
scheduled together. Two algorithms can be used for determining the GCD. One ad- 
dresses a single-processor environment only. This algorithm divides each period value 
in the sequence bv the smallest period value. Whenever a reinamder occurs, the de- 
nonunator is decreased by one and the process repeats until all remainders equal Zero. 
This algorithm results in one sequence of periods (the base block) with one base period 
(the GCD). 

The second algorithm, applicable to multi-processor environments, is stmi- 
lar in design but results in one or more base blocks, each having a unigue GCD and a 
unique sequence of operators. An initial pass through all of the periods tesulis in two 
sequences, only one of which is a final base block with a GCD. Whien division results 
in a Zero remainder, the period is placed in a primary sequence. Whlien division results 
in a non-zero remainder, the period is placed in an alternate scquence. Subsequent 
passes only use the most recent alternate sequence. This process is continued ieee 
alternate seyguence equals the null set. This unplementation uses tlie second algorithm 
for two reasons. Virst, although the basic designs are simular, the implementation is 
more straightforward. Second, for a single-processor environment, tlie second pass ver- 
ifies that all periods were assigned correctly to the first sequence if the alteruate sequence 


equals the null set. 


The last preliminary step to create the static schedule uses an algorithm 
which calculates the length of time for the harmonic block. In a single-processor euvi- 
roumient, the operators and their periods used to create the base block are the same as 
those in the harmonic block. The actual harmonic block length is the least common 
multiple (LCM) of all the operators’ periods contained in the block. The algorithm first 
calculates the GCD as above for tie first pair of periods in the block. The LCM is then 
Calculated by dividing the product of this pair by the GCD. The calculated LCMI 1s 
paired with the next period in the block, after which the GCD and LCM are again cal- 
culated. The LCM calculated using the last such pair is the LCM for the harmonic 


block. Mathematically, for a block of four penods the algomthm corresponds to 
ede — ee VE eG ( Period. 3, Pertod_ ) j. 


The harmome block and its length are an integral part of creating the static schedule. 
This block represents an empty timeframe within which the operators will be allocated 
time slots for execution. 

e. “Schedule_Operators” 

The “Sort_Topological” and “Butld_Harmonic_Blocks” functions generated 
output files for Precedence_Lists and IHarmonic_Blocks, respectively. Both of these files 
are necessary to create a static schedule for time critical operators. Thre 
Precedence_Lists file contains the required sequential execution order for all time critical 
operators. The Harmomec_Blocks file contains the basic tinieframe within which the 
critical operators are allocated non-overlapping time slots. The resulting static schedule 
is a linear table giving the exact execution start time for each critical operator and the 
reserved MET within which each operator complctes it execution. 

The algorithm used in this unplementation is a two-step process, both of 
Which use the operators’ periods and METs. The first iterative process performs two 
distinct functions. Initially, it allocates an execution time interval for euch operator 
meer, 19: p. 126] based on 


INTERVAL = (current_time, current_ume + MET ). 


Next the process creates a firing interval for each operator during which the second it- 


erative process must schedule the operator. The firing interval stipulates the lower and 
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upper bound for the next possible start time for an operator based on its period. .\s an 
example, OP_2 im igure I4 on page 41 is scheduled to begin execution at time 2d 
to complete execution by time 3 based on nts MET of 1. With a period of 10, OP_2 can 
not fire again before time 12, the lower bound. But OP 2 must fire at or before tiem 
the upper bound, in order to guarantee that execution 1s completed on or before time 
pape 

The second process has three distinct functions. Initially, it uses the lower 
bound of each firing interval when it schedules operators during subsequent iterations. 
The sequence of operators 1s allocated time slots according to the earliest, lower bound 
first. For the example in the previous figure, the operators are scheduled in the order { 
OP_t, OP_2, OP_3 } during the first iteration in this process. Since OP_4 has a period 
of 20 units and the harmonic block length is also 20 units, OP_4 1s scheduled oniv once 
in each harmonic block. Before an operator is allocated a tine slot, this process verifies 
that either: 

I. ( current_urne + MET) < harmonic block length 


2. (current _tme + MET) =< harmonie block length. 


The second condition ts applicable to the last operator scheduled in that harmonic block 
only. Failure to meet either condition results in an infeasible schedule. This situation 
raises an EXCEPTION which halts execution since the timing constraints of that oper- 
ator, or of future operators in the next iteration, will not be met. 
This process also calculates new firmeg itervals for cach operator scheduled. 
As an example, Figure 15 on page 42 shows the static schedule and two harmonic 
blocks after three iterations of this precess. This example tllustrates the imnortaticeses 
calculating an accurate harmonic block. Onee all operators are correctly scheduled 
within an entire hurmonic block, all subsequent harmonic blocks are copies of the first 
-- a static schedule. 
2. Static Scheduler Implementation 
This Chapter described the conceptuaiized design utilized to miplemeniiie 
Static Scheduler. Vhe primary objective was providing background knowledge of the 
overall design using the Ist level DID. Additional details were meluded to cnlhunesiiaae 
reader's understunding of the umplementation guidelmes presented in Chapter 1V using 


the Ada® programming language and the lower level DFDs m Appendix C. 
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Given the following information: 
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Figure 15. Static Schedule for 2 Harmonic Blocks 


IV. STATIC SCHEDULER IMPLEMENTATION 


The information outlined in Chapter III described the importance of the Static 
Scheduler to the computer-aided rapid prototvping environment and laid the ground- 
work for designing the implementation guidelines. Utilizing the algorithms described 
verbally in Chapter III and the DFDs from Appendix C, this Chapter describes the 
analysis, alternatives and decisions required to produce the Ada® pseudocode in Ap- 


ondix E. 


A. OVERALL PROGRAM STRUCTURE 

As graphically shown in the Ist Level DFD in Appendix C (Figure 18 on page 67), 
the Static Scheduler was conceptualized as five primary functional programming units 
or bubbles. Each of the five bubbles was decomposed into one or more subsections 
which perform individual, specific functions. Together, these subsections, or lower lev- 
els, achieve the stated goal of the primary bubble. These subsections are graphically 
described in increasingly more detail in the 2nd, 3rd and 4th level DFDs also found im 
Appendix C, 

Two additional primary progranuming units Were identified during the initial analysis 
period. These mclude one programming unit comprised of all common files and a sec- 
ond, the main driver program. Initially the Ist Level DID described the data flow be- 
tween the bubbles, while further analysis indicated that all the bubbles utilized attributes 
from four primary and permanent files. Combining all four of these files in one pro- 
gramming unit, an Ada® library package, allows global access to all data attributes by 
any other bubble. Second, when using a structured programming approach, common 
practice requires a main driver program which provides sequential control of program 
execution. The driver program, implemented as a procedure in this application, contains 
a sequence of call statements which temporarily pass execution control to a particular 
progranuning unit. Upon execution completion by the called unit. program control re- 
turns to the driver program at the point immediately below the previously called state- 
ment. In this way, the driver program provides a thread of control through all of the 
program modules. 

I. Nantiung Conventions 

Before relating a specific lower level DFD to its implementation in the Ada® 


pseudocode, the reader requires one caveat. The Ist and 2nd level DF Ds were adapted 
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for this thesis from a separate research effort while the 3rd and 4th level DF Ds were 
designed during the mutial stage of this research. Therefore, the names used to identify 
bubbles in the DFDs will not always precisely match the names associated with their 
pseudocode implementation. Sufficient similarity does remain which should preclude 
unnecessary confusion. In addition, there are cases where a lower level bubble has no 
unique program unit. These situations occurred when the author determined that the 
function described bv the bubble represented a single operation and did not warrant a 
Stand-alone program unit. 

2. Implementation Approach 

The remainder of this Chapter will outline the transition from a conceptualized 
idea to the pseudocode implementation for the Static Scheduler. Each presentation that 
follows begins with an analvsis of the program module aid the end result that must be 
realized. Second, anv alternative approaches that will achieve the same, or similar, ac- 
ceptable result are identified. Finally, if alternative solutions were identified. the pres- 
entation concludes with a description of the alternative chosen for this implementation 


guideline. 


B. PROGRAM EXCEPTION HANDLING 

Run-time errors generally occur during program execution due to hardware failure, 
software inconsistencies or erroneous interactive data input. An error is more precisely 
defined as an exception to the normal or anticipated behavior of a svstem. With pnas 
duction software, these exception situations indicate “bugs” Which require either imme- 
diate or eventual modification depending on their impact to the system overall. With 
coinputer-aided rapid prototyping, however, an exception situauon should alert the 
software designer and the user to inconsistencies in the design or paramicters used to 
develop the prototype. In hard real-time or einbedded systems, exception handling in- 
creases the reliabilitv of critical program seginents and can aid in graccful degradation 
of the system should exceptions occur. 

1. Ada Exception Ulandling 

The Ada® programuning language includes both pre-defined and user-defined 

excepuons. The sets of pre-defined exceptions address conventional errors usually han- 
dled by the underlying operating system, such as DEVICE ERROR, In contrast, user- 
defined exceptions can address specific input parameters or calculated values that are 


outside the expected or anticipated system constramts. 
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A standard rule for designing exception handlers stresses that exceptions should 
be identificd and resolved at the lowest possible level tn the program [Ref. 1: p. 316}. 
Within Ada®, after an exception is resolved, execution control returns to the end of the 
particular programming unit where the exception was handled. Thus, if an exception 1s 
handled within a local procedure (subroutine), the driver program is unaware of its oc- 
currence. In a computer-aided prototyping environment, this also implics that the de- 
signer and user lose “real-time” ability to evaluate the impact of the exception. 

2. Static Scheduler Exception Handling 

An alternative solution, utilized for this implementation, raises the exception in 
the local program umit but passes exception handling to the dnver prograin. The cx- 
ceptions raised in the Static Scheduler, as shown in Figure 16 on page 46, concern the 
validity of the mung constraints identified by the user. Exceptions | through 6 indicate 
that cither required constraints are nussing or they are logically inconsistent. .\s an ex- 
ample, the third exception would be raised when MET > MRT, which indicates a neg- 
ative period of tume. Exceptions 7, 8 and 9 indicate that, although a schedule may ve 
possible, there is no guarantec that it will execute within the required timing constraints. 
Exceptions 10, !1 and 12 indicate that, with the given timing constraints, no feasible 
schedule exits which meets the requirements of the envisioned system. 

Depending on the system application and the user, exception handling could 
include built-in contingencies to modify the constraints rather than suspend execution 
of the prototype. Ilowever, this approach would increase the complexity of the proto- 


type and the performance statistics reported to the designer and user. 


C. PACKAGE PRESENTATIONS 

The Static Scheduler, as implemented in this thesis, contains six package program- 
ming units. ive packages represent the five primary functional groupings with onc ad- 
ditional package containing only permanent or global file information. A package is a 
collection of logically related, computational resources which support a structured. mo- 
dular design and abstract data or type representations. Thus, the Ada® package con- 
struct provides the required mixture of accessibility and information hiding for this 
application. By design, the package declaration section contains suflicient visible infor- 
mation which facilitics information exchange between programming units. At the same 
tine, a package declaration can contain invisible (private) sections which contain struc- 
tural level details that are irrelevant to the outside users. [Ref I: pp. 218-219] Low- 


ever, in this application, private types were not utilized in order that the reader could 
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Figure 16. Static Scheduler Exceptions 


more casilv follow program development. The following sections describe each of these 
packages and outline specific implementation considerations. 
1. “Files” Package 

The Files package groups together the four permanent files containing critical 
operators and their timing constraints. This structure provides a global database for use 
by all of the other packages as required. The Links and the Operators files are created 
from the information identified and retrieved from the PSDL prototype source program 
during the Separate Data procedure witlin the File Processor package? sie 
Precedence List 1s created by a precedence level sort routine during the Create igtsaaaaee 
Sort_Remaining Operators procedures within the Topological Sorter package. The 
Schedule Inputs file is created by two function programnung units, Cale Lower and 
Cale Upper. These two sub-units are called by the Create_Interval procedure within the 


Operator_Scheduler package. The Viles package represents an Ada® library package 
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Palenis decessipic to all ollier programming units by speeifving the “with [iles” state- 
ment prior to the package declaration. . 

Several alternative approaches were considered for structuring this database of 
timing constraints. One-dimensional arrays initially appeared most appropriate with 
their built-in indexing structure. lfowever, the array construct requics a prior know- 
ledge of the array size before compilation time. The second approach considered, linked 
lists, would clinunate the need to include repetitive entries between files. In this apph- 
cation, the operator identifier must be included in cach file. But this approach would 
also conceal the unique character or use for each file. The author believed that the re- 
cord format utilized in this implementation was the most straightforward description of 
the individual files and their attributes. 

ee trop. Reader” Package 

The package PSDL Keader implements a 2nd level DI-D from Appendix C 
(Figure 19 on page 68). Implementation assumptuons for this application were outlined 
foe hapter Iii, Section B.l.a. This package represents the single miost mportant aspect 
of the Static Scheduler. The procedure Invoke AG Processor initiates the Kodivak AG 
processor that was developed in conjunction with this Static Scheduler implementation. 
The procedure Read_the File uses the output of the Kodivak AG processor as the 
source for all of the operators and the timing constraints needed to create the static 
schedule. 

a. hodtyak AG Processor 

Appendix D contains a coinplete program listing of the Kodivak AG pro- 
cessor as it was tailored for this application. The attribute granimar section of the pro- 
cessor contains the grammar svmbols, along with their syntax and attribute definition 
equations, which idenufy the symbols within the PSDL prototype program that the 
Static Scheduler requires. These required svmbols are the operator identifiers and their 
critical timing constraints (operator, maximum execution time, maxlnum response time, 
muninuin calling period, time, unit, links, period, and finish). 

Theoretically, the Kodivak AG translator generator is an easy-to-use, effl- 
cient tool for creating specialized processors. [lowever, expericuve showed that, in order 
to identify the nine required svmbols, at least 30 attribute definition equations required 
modification. The author deternmuned that the difficulties encountered with creating the 
AG processor centered around two significant areas. Virst, the Kodiyak AG processor 


is based on a tree architecture which “grows” or develops as the graminar symbols are 
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interpretted. Problems could possibly arise when only a small subset of the svinbols are 
required, leaving discontinuiues within the branching of the tee. Second. proliciency m 
using the Kodivak AG software tool requires an extensive learning curve. Munnnal do- 
cumentation requires verbal “pass down” of lessons learned or repetitive trial and error 
to eliminate reduction errors. In addition. error reporting at compilation ume is not 
sufficient for a student new to the area of language translators. 

3. “File _ Processor” Package 

The package File Processor implements a 2nd level DFD from Appendix © 
(Tigure 20 on page 69). [Implementation assumptions for this anplication Were outlined 
mu) Chapter Elf. Section B.l.b. This package contains a sort routine and a datauiipee 
Validation phase. The Separate _Data (sort) procedure uses an input file, AG_Outfile, 
created by the PSDL_Reader package. Tlus procedure creates three lites) Orlegaaae 
files, Non-Crits, 1s used by the Static Scheduler to schedule non-tine critical Operiiems 
and contains operator identifiers retrieved from the AG output that do not inciude an 
MET value, a requirement for critical operators. The two files created for the Stamm 
Scheduler are the Links and the Operators files. The components of the Links iilgaame 
identified withm the AG_Outfile by the keywords “graph” and “links”. The components 
of the Operators file are identified by the keywords “operators’, “operator speem 
"max _exec_time”, “max_resp time’, “nun_period” “time , “unit, period | aiid iii 

A fourth set of retrieved symbols are dumped to a temporary file, Trash_Tile. 
These symbols arise due to a data tvpe to operator interconnection mherent in the PSDL 
language. The cross connection stems from the “tvpe_impl” (data type unplementation) 
and the “type spec” (data type specification) constructs in PSDL. Ihe PSDL angie 
definition equations for these symbols include operators that are utilized in the data tvpe 
implementations. The author did not assoctrate these equations with the critical operator 
specifications and unplementations required by the Stat Scheduler. 

The Validate_Data procedure uses attributes [rom the Operators [ile to perform 
basic validity checks on the timing constraints. As described in Chapter [II, certain re- 
lationships are required between tinung constraints to insure, with some degree of rehi- 
ability, that a static schedule is feasible. Therefore, timing constraint relationships are 
validated as early as possible in this implementation. An exception ts raised when any 
constraint fails a validity test. This prompt feedback allows the designer and the user 
to modify constraints, When necessary, early m the prototype construction and demon- 


Stration:. 
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4. “Topological Sorter” Package 

The package Topological Sorter unplements three lower level DFDs which ap- 
pear in Appendix C (Tigure 21 on page 69 through Figure 23 on page 70). Implemen- 
tation assumptions for this application were outlined in Chapter III, Section B.l.c. Thus 
package utilizes two procedures and the Links file to initiate and build the 
Precedence List file. 

The initial procedure Create_Lists must identify the starting point for the topo- 
logical sort. The procedure uses a pair of nested loops to compare the first operator 
identifier{i] on the left of the arrow with each and every operator identifier{j] on the megbet 
of the arrow. The operator identifier{i] with no matching identifier{j] 1s the starting point. 
Execution control passes to the next procedure after the identifiers [1] and [j] are posi- 
mome im the Precedence List hile. 

The remaining link statements are sorted within the Sort_Remaimuing Operators 
procedure. This topological sort is similar to the operation in the previous procedure, 
but reverses the logic. In this sort, precedence relationships among operators are eval- 
uated by comparing the first operator{j] on the mght of the arrow with the second 
operator{i+ 1] on the left of the arrow. When a match is found, operator[it+ 1] and its 
corresponding operator{j+ 1] are placed in the second positions of the Precedence_ List. 
This operation continues until no match is found, indicating the end of the Links file. 
The resulting Precedence List is used as input to the Operator Scheduler package. 

3. “Build Harmonic_Blocks” Package 

The package Build _Harmonic_Blocks implements ten lower level DF Ds from 
Appendix C (Figure 24 on page 7] through Figure 33 on page 75). Implementation 
assumptions for this application were outlined in Chapter III, Section B.l.d. This 
package contains four major procedures which create an harmonic block template that 
is tailored to the eritical operators and their firing intervals. 

The initial procedure Calc_Periodic_Equivalents contains three sub-procedures 
which perform specialized operations. The procedure Locate Sporadic Operators first 
identifies critical operators that fire sporadically, indicated by the presence of an MCP 
value for that operator. Second, this procedure verifies that the operator record contains 
an MRT value. If not present, the procedure creates the value from the given con- 
Straints as either( MRT := WITHIN ) oras( MRT := MET ). The second major 
procedure Verifv_1 verifies the relationships between the timing constraint values that 


are needed to calculate the equivalent operator period. These constraints include the 
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MCP, MRT and MET values for cach sporadic operator. Exceptions are qaisccmanam 
execution Is suspended if the required relationships are not met. These exceptions indi- 
cate that a valid static schedule is not feasible with the given unung constraints. )iewaen 
procedure Period Algo calculates the equivalent period value for each sporadic operator. 
The new period equals the smaller valuc of either \NCP or (ey ei 

The second major procedure Sort_by_Period performs an ascending order sort 
based on the operators’ periods. The third major procedure Find_Base_Block uses this 
sorted operator sequence to verify the compatibility of the operators. In order to create 
a valid static schedule, the operators’ periods must be multiples of a common divisor 
(GCD). A modulus (mod) division function embedded within nested loops calculates the 
GCD for the sequence of operator periods. For a single processor systein, a single GCD 
.o1 all of the operators’ periods verifies that a valid static sclicdule exists for tieuaiaam 


constraints. 


The final major procedure lind _Block Length calculates the actual Iength of 


the harmonic block template. This procedure uses two functions, Find_GCD and 
Find LCM, that are embedded within an outer loop. This process continues through 
the sequence of all operator periods until a final LCM is calculated. The final LCM 
equals the length of the harmonic block within which the critical operators will be 
scheduled. = - 

6 “Operater Scheduler” Packiuge 

The package Operator Scheduler implements ten lower level DFSs from Ap- 
pendix C (Figure 34 on page 76 through Figure 43 on page 80). Implementation as- 
sumptions for this application were outlined in Chapter III, Section B.l.e. This package 
contains four major procedures. These procedures verify the initial feasibility of the 
harmonic block’s accurate execution, schedule the operators within the harmonic block, 
and finally create the static schedule that the Dynanue Scheduler executes at prototype 
runtime, 

The initial procedure Test_Data utilizes embedded procedures which determine 
the overall feasibilitv of the final static schedule to exccite within the tuning constraints. 
The assuinptions behind these validity tests were outlined in Chapter III. Each proce- 
dure raises an exception if the static schedule inputs fail the indicated validity testiiic 
procedure Cale {fotal_Time indicates that the schedule will fail at execution since the 


number of operations times their METs is greater than the harmonic block length. The 
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procedures Cale Half Periods and Cale Ratio Sum indicate, with a high degree of 
probability, that the schedule will fail during execution. 

The next two procedures, Schedule_Iniual Set and Schedulc_Rest_of_Block, 
utilize the Precedence_List and the operators’ MET values to create a firing interval for 
each operator. The firing interval contains the start time and worst case stop tune, bascd 
on MET, for cach operator. The stop time of opcratorf[i], together with the period of 
Operator[i+ 1], dctermine the start time for operator{i+ I]. Although initially conceived 
as a single proccdure, analtvsis indicated a differcnee in scheduling logic between the first 
and subsequent passes through the Precedence_List. During the second and [future 
passes the opcrators’ execution order may vary from the Preccdence_List bascd on cach 
Operators’ pcriod. The final output of these two mayor procedures ts the 
Schedule_[nputs fite which contains a pre-allocatcd firing interval (slot) within the har- 
monic block for each time critical operator. 

The final procedure Create_Static_Schedule utilizes the Schcdule_Inputs {ile to 
create the static schcdule used by the Dynamic Scheduler at run-time. As conceived by 
the author, the static schedule is implemented as an Ada® package containing a task 
programming unit. The task, in turn, contains the Ada® rendezvous statements ENTRY 
and ACCEPT. The ENTRY statements call either the next scheduled operator or the 
Dynamic Scheduler. The Dynamic Scheduler is called when either a non-allocated tine 
slot is rcached or when a critical operator complctcs cxecution prior to its scheduled stop 


time. 


D. RUN-TIME STATIC SCHEDULE 

The final output of the Static Scheduler program, the Static Schedule file, provides 
the input for the CLE. The CLE compiles the Static Schcduler’s output and produces 
an executable Ada® program. An example of the compiled program is shown in 
Figure 17 on page 52. This program, together with the executable programm from the 


ESS Translator, provide the exccutable prototype program for the cnvisioned system. 


package THE_STATIC_SCHEDULE is 
task SEQUENCE_OF_CALLS is 
entry EACH_OPERATOR. OPERATOR[i] (THE_START[i] : in out INTEGER; 
THE_STOP[i] : in out INTEGER); 
entry DYNAMIC (THE_STOP[i] : in out INTEGER; 
THE_START[it1] : in out INTEGER); 
end SEQUENCE_OF_CALLS; 
end THE_STATIC_SCHEDULE; 


with CALENDAR; 
package body THE_STATIC_SCHEDULE is 
begin 
task body SEQUENCE OF CALLS as 
begin 
loop 
procedure THE_OPERATOR[i] is 
begin 
accept EACI{OPERATOR. OPERATOR[iJ(THE_START[i] : in owe iN Gee 
THE_STOP[i] : in out INTEGRig® 
select 
when CLOCK. VALUE < THE _STOP[i] then 
entry DYNAMIC 
or 
when CLOCK. VALUE = THE_STOP[i] then 
entry EACH_OPERATOR ( OPERATOR{i] ) 
else 
exception 
when others => 
= raise RUNTIME_MET_FAILURE 
end THE_OPERATOR; 
end loop; 
end SEQUENCE_OF_CALLS; 


end THE_STATIC_SCHEDULE; 


Figure 17. Ada® Pseudocode for the Static Schedule 
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V. TELECOMMUNICATIONS APPLICATION 


The utilization of digital computers in telecommunreations systems, in general, 
greativ increases the DOD’s and DON’s ability to meet the growing needs of users, both 
ashore and afloat. The advent of embedded computer systems which preform autoniated 
circuit switching, whether at a station’s technical control facility or within the satellite 
itself, will again increase the service department’s ability to expand or add new telecom- 
unications capabilities. The growth of and demand for communications services would 
benefit from the development of dynamic circuit or channel assignment systems. These 
systems provide improved allocation of scarce satellite and radio frequency spectrum 
resources. Computer-aided rapid prototyping, and specifically the CAPS, will assist in 
the design and development of these complex teleconmmunications systems. 

A Satellite-Switched Time Division Multiple Access (SS, TDMA) system ts a specific 
example of a telecommunications system whose development would benefit from the use 
of CAPS. In this system, communications between earth stations in different geographic 
areas is achieved when the satellite switches (changes) transnussion time slots [rom one 
beani to another. Only one station from each individually covered area can transmit to 
the satellite at the same time. If N arcas are served, then the satellite switch 1s config- 
ured to handle N! modes for complete connectivity among all of the stations. A mode 
represents a defined uplink-downlink connection from each station to every other sta- 
tion. [Ref. 17: pp. 309-311] The number of possible modes quickly becomes unman- 
ageable without automated switching systems. The complexity and precision required 
for designing and developing such a system can be represented by the PSDL computa- 
tional model used in the CAPS. 

The CAPS described in this thesis provides a development tool which 1s easily 
adapted to modeling real-time or embedded switching systems. The PSDL computa- 
Pema inode! (sce Chapter |1), based on data flow through a system, represents an ab- 
stract view of both the hardware and software of these complex systems. As adapted for 


the SS/TDMA system, the computational model represents 


Op TE Ms ela 
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where: 


7 V = a set of operators (signal processing equipment) 
* E = a set of data streams (up and downhmk beans) 
e T(v) = MET for each operator (v) 


® C(v) = a set of control constraints for each operator (environmental factors and 
mode conligurations). 
These \[ET timing and control constraints are declarations about the system itself and 
the environment in which it must function. This is in contrast to instructions within the 
applications software. 

The communications switching svstem aboard the satellite receives a signal via a 
channel on the uplink beam. The systern then processes the signal tn some manner de- 
pending on the application. Ar. MET associated with this process insures proper exe- 
cunon of the TDMA function and of the svstem us a whole. Control constraints for this 
system would include, for example, the mode configuration routing tables, data error and 
flow control, and svstem load capacity. Outce the switching process ts complete, the 
system transnuts the signal on the appropriate downlink beam. When the above mfor- 
mation 1s apphed to the CAPS and the prototype is executed, the resultant demon- 
Strations of the prototype can be used to validate the design specifications for the 
receive, process and transnut functions of the envisioned $S/TD MA svsteim. 

As users of nulitary telecommiunications systems become accustomed to high-speed, 
reliable and dynaunuec communications, applications for hard real-time or embedded syvs- 
tems will increase. These svsteis, especially switching systems, are charactensed by 
inultipheity and concurrency of otherwise snnple, interacting functions. The conven- 
tional approach to software life cycle development is quickly becoming inadeaquate or 
obsolete for the strenuous demands of designing and developing these complex systems. 
Abstract modeling of telecontmunications systems reduces the probability of develop- 
ment failure by identifving areas with the highest risk. Desien efforts are then conceu- 
trated on reducing those risks by demonstrations of the prototype ear'y in the design 
stages. The CAPS tool will assist procurement and development agencies in meeting the 


teleconununications needs of the future. 





pie CONCLUSION 


The goals of this-pioneering effort were to demonstrate the leasrbility of miple- 
menting a Static Scheduler for the CAPS and to provide guidelines for its implementa- 
tion. This thesis outlines the tools and algorithms that are required, at a minimuin, to 
implement the Static Scheduler and to integrate it within the Execution Support System. 
This study accomplished these goals while identifying specific areas of concern for future 
research. 

The Kodiyak AG translator generator is an effective and efficient tool for processing 
a PSDL prototype source program. An AG processor designed specifically and precisely 
for the Static Scheduler is fundamental to the successful scheduling of time eritical op- 
erators. Misrepresentation of or failure to identify operators and their timing constraints 
negates the benefits of the best designed scheduling algorithms. Lack of user {riendly 
error messages and basic manuals causes an extensive learning period using trial and 
error or verbal “pass down’. 

The Ada® programming language provides the necessary constructs and enforces a 
modularized, self-documenting design, both of which enhance the feasibility of imple- 
menting the Static Scheduler. Ada® user-defined file and data tvpes allow precise dec- 
laration (definition) of critical operators’ attributes (thming constraints) Ada® 
rendezvous operations using ENTRY and ACCEPT statements provide a means to es- 
tablish and enforce execution precedence among critical operators. Rendezvous oper- 
ations provide the backbone of the runtime static schedule created by the Static 
Scheduler. [Formal demonstration of the Statie Scheduler will determine whether these 
Ada® constructs are sufficient and effective in meeting the critical timing constraints of 
hard real-time or embedded systems. 

Recognizing the increased cost and unportance of software development for Coim- 
mand and Control systems, the Secretary of the Navy (SIECNAV) promulgated a new 
instruction addressing software development and acquisition (see Ref. 18). This in- 
struction documents SECNAYV concern for defining a DON acquisition policy for soft- 
Ware-intensive systems and increasing user involvement during the design and 


development stages. The policy combining these two concerns states 


Yo promote ellective interaction betswwecn the itser and the developer, soit anesemes 
totvping methods shall be used in the design and construction of C2 mtormution 
svstems. Early delrsery of software systems ts emphasized through the use of pro- 
totvping methods. [{[Ref. 18: p. 2] 

The instruction defines software prototypes identical to that used throughout thus thesis 


d$ 


Sottware which stimulates the tmportant interfaces and performs the main functions 
of the mtended system: while not being bound by the same hardware, speed, size or 
cost constraints. It niay serve to demonstrate or provide a subset of the furctions 
that would be required of software to meet a related, fully-validated requirement. 
(Ret. Sopp. Tea 
Computer-aided rapid prototyping specifically addresses the concerns of the SECNAYV. 
[n particular, the CAPS stresses interaction between the software designer and the user 
early in the design aud development stages. This allows validation of the prototype s 
ability to simulate the critical interfaces and functions of the envisioned system. The 
author agrees that the increased cost and coniplexity of developing soltware warrants a 
revised approach to the software acquisition procedures. 

Concurrent research projects to conceptualize components of the CAPS Execution 
Support System are now complete. These individual efforts empirically demonstrate that 
the initial goal of providing an automiated execuuuon environment for a software design 
or specification prototypes is feasible. The CAPS wil provide software designers with 
an automated tool which allows validation of prototypes for hard real-time or embedded 
systems before extensive ume and money are invested in production software. Addi- 
tional research projects are currently underway to conceptualize, implement and inte- 
grate the various components or subsystems of CAPS. The time and effort expended 
today toward a formal demonstration of the CAPS, together with increased usage of the 
Ada® programming language, pronuse a future rapid prototvping environinent which 
meets the demanding needs of the DOD and DOWN software procurement and develop- 


ment process. 





APPENDIX A. PSDL GRAINMAR 


Optional items are enclosed in [ square brackets ] and items 
that may appear zero or more times appear in { braces } 
Terminal symbols appear in ' double quotes 


psdl = { component } 


component = data_type 
Operacor 


— | 


data_type = "type' id type_spec type_impl 
operator = "operator' id operator_spec operator_impl 


type_spec = “specification™ [ type_decl ] 
(operaccre td Operatce spec } 
fnunetionality | end 


operator_spec = "specification" interface 
[ functionality ] “end” 


interface = { attribute [{ reqmts_trace ] } 
attribute = generic_param 
| input 

| output 

| states 

| 

| 


exceptions 
timing info 


generic_param = "“generic’ type_decl 


input = "input" type_decl 


output = "output" type_decl 

states = "states" type_decl "initially" expression_list 
exceptions = "exception id_list 

id list = id ("," id } 

“maximum execution time’ time ] 


tf ’ ¢ ¢ ’ ’ 

[ ‘minimum calling period" time ] 
tf ° . t e 

[ maximum response time" time ] 


timing info = 


time = integer [ unit ] 
: ae t 
unit = microsec 
| "nas"! 
tt tt 
| ‘sec 


on 


tt ? 
| hours 


reqmts_trace = "by requirements’ id_list 





functionality = [ keywords ] 
[ informal_desc ] 
[ formal_desc ] 


keywords = "keywords" id_list 

informal desc = “description “mee ae 

formal dese = axioms  — |testua 

type_impl = “implementation” "Ada" id 


“implementation type_name . 


{ ‘operator id Gperator amp) = ne 


operator_impl = "implementation" "Ada" id 
| “implementation psdl_impl 


psdl_impl = data_flow_diagram 
[ streams ] 
[ timers ] 
[| ‘control seconstraintss) 
[ informal_desc ] 
'f tt 
end 
data_flow_diagram = "graph" { link } 
link = id@eemoplid — <> id 
Opmid = taf | Stime | 
streams = "data stream’ type_decl 
type_decl = id_list ":" type_name { °, “id_list 7 "typeunamem 
Cype_name = 1 
id ff  epeudecie. me 
timers = "timer" id_list 
control_constraints = "control constraints (concemaimce: 
constraint = noperator™ id 
t 


[ “triggered” [ trigser } [ Gh predvemeen) 
[ reqmts_trace ] } 
[ “period” time f reqmts_trace ] ] 
[ “finish within’ time { ceqnitsmertecmae | 
( “output id list “if” sredienme 
\ 


ft 


reaqnts-trace |} 

{ “exception id ie 
[ reqmts_trace Ve 
(timer op tess et 


fi predsejres 


' predicate J 


i Leqmtsaunace | > 


= "RESET timer’ 
| "START timer’ 
ome Retamer. 
| "READ timer" 


Eimer_op 


feigcer = “by all’ id_list 

"by some’ id_list 
predicate = "not' predicate 
| predicate "and" predicate 
| predicate "or predicate 
| expression 
| id ":" id list 
expression = constant 

| id 


| type_name " 


fn ldeiGeserpressiion list  )- 


7 


; : = . re EAt ’ : 
expression_list = [ expression { , expression } ] 
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APPENDIX B. HYPERTHERMIA SYSTEM 


This appendix contains the PSDL source program for the Hyperthermia System as 
created by the designer and the user. Tlus program does not represent all aspects of the 
final envisioned system. As required for prototype development with the Computer 
Aided Prototyping System (CAPS), this PSDL program contains only those attributes 
and functions that are required to simulate the critical timing characteristics of the svs- 


FCI. 


OPERATOR brain_tumor_treatment_system 
SPECIFICATION 
HNeUL patient_chart: medical_history, 
treatment_switch: boolean 
OUTPUT treatment_finished: boolean 
STATES temperature: real 
INITIALLY 37.0 
DESCRIPTION 
{ The brain tumor treatment system kills tumor cells 
by means of hyperthermia induced by microwaves. 


END 


INPLENENTATION 
GRAPH 2 
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SIMULATED_PATIENT 


TEMPERATURE TREATNENT_POUER 





PATI ENT_CHAAT HYPERTHEAMNIA_SYSTENM 


TREATNENT_SHITCH 


TREATMENT FINISHED 


DATA STREAM treatment_power: real 
CONTROL CONSTRAINTS 
OPERATOR hyperthermia_system 
PERIOD 200 BY REQUIREMENTS shutdown 
OPERATOR simulated_patient 
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FERLOD 200 
DESCRIPTION { paraphrased output } 
END 


TYPE medical_history 
SPECI PICALION 
OPERATOR get_tumor_diameter 
SPEC Te I CAg TON 
INPUT patient_chart: medical_history, 
tumor_location: string 

OUTPUT diameter: real 

EXCEPTIONS no_tumor 

MAXIMUM EXECUTION TIME 5 ms 


DESCRIPTION 
{ Returns the diameter of the tumor at a given location, 
produces an exception if no tumor at that location. 


END 


KEYWORDS patient_charts, medical_records, treatment_records, 
lab_records 
DESCRIPTION 
{ The medical history contains all of the disease and 
treatment information for one patient. The operations 
for adding and retrieving information not needed by 
the hyperthermia system are not shown here. 


END 

IMPLEMENTATION 
tuple | tumor_desc: “map| from: String, to: reales 
OPERATOR get_tumor_diameter 


IMPLEMENTATION 
GRAPH 


PATIENT_CHART 


TUPLE .GET_TUNOR_DESC 






TO 


DIANETER 
TUNOR_LOCATION 


DATA STREAM td:  tumor_descr 
CONTROL CONSTRAINTS 
OPERATOR map. fetch 
EXCEPTIONS no_tumor IF not(map. has(tumor_location, td)) 


END 


END 


OPERATOR hyperthermia_system 
BEBCIFICATION 
INPUT temperature: real, patient_chart: medical_history, 
treatment_switch: boolean 
OUTPUT treatment_power: real, treatment_finished: boolean 
Pe tNUM EXECUTION TINE 100 ms 
BY REQUIREMENTS temperature_tolerance 
me IMUM RESPONSE TIME 300 ms 
BY REQUIREMENTS shutdown 
KEYWORDS medical_equipment, temperature_control, 
hyperthermia, brain_tumors 
DESCRIPTION 
{ After the doctor turns on the treatment switch, the 
hyperthermia system reads the patient's medical record 
and turns on the microwave generator to heat the tumor 
in the patient's brain. The system controls the power 
level to maintain the hyperthermia temperature of .- 
42.5 degrees C. for 45 minutes to kill the tumor cells. 
When the treatment is over, the system turns off the 
power and notifies the doctor. 


END 


INPLEMENTATION 
GRAPH 90 








TENPERATURE RALATASN 


TREATMENT_F IN!ISHED 








STAAT_UP 





PAT TL ENT_CHART TRERATNENTWF IN ISHED 






EST IMATED_POGNEA 
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TREATMENT_PONER 






TREATNENT_SWITCH SAFETY_COMTROL 
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DATA STREAM estimated_power: real 
TIMER treatment_time 
CONTROL CONSTRAINTS 
OPERATOR start_up 
TRIGGERED IF temperature < 42.4 
BY REQUIREMENTS maximum_temperature 
STOP TIMER treatment_time 
RESET TIMER treatment_time IF temperature = -— 3370 


OPERATOR maintain 
TRIGGERED IF temperature >= 42.4 
BY REQUIREMENTS maximum_temperature 
START TIMER treatment_time 
BY REQUIREMENTS treatment_time, temperature_tolerance 
OUTPUT treatment_finished IF treatment_time >= 45 min 
BY REQUIREMENTS treatment_time 
END 


OPERATOR =startrtup 
SPECIFICATION 
INPUT patient_chart: medical_history, temperature: real 
OUTPUT estimated_power: real, treatment_finished: boolean 
BY REQUIREMEMI Se Stamens: ome 
MAXIMUM EXECUTION TIME 90 ms 
BY REQUIREMENTS temperature_tolerance 
DESCRIPTION 
{ Extracts the tumor diameter from the medical history and 
uses it to calculate the maximum safe treatment power. 
Estimated-power is zero if no tumor is present. The 
treatment finished is true only if no tumor is present. 


END 


IMPLEMENTATION Ada start_up 
END 


OPERATOR mdintain 


SPECIFICATION 
INPUT temperature: real 
OUTPUT estimated_power: real, treatment_finished: boolean 


MAXIMUM EXECUTION TINE 90 ms 
BY REQUIREMENTS temperature_tolerance 
DESCRIPTION 
{ The power is controlled to keep the power between 42.4 
and 42.6 degrees C. 


END 


IMPLEMENTATION Ada maintain 
END 
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OPERATGR safety_control 


er eC lFICATION 
INPUT treatment_switch, treatment_finished: boolean 
estimated_power: real 


OUTPUT treatment_power: real 
BY REQUIREMENTS shutdown 
MANIMUM EXECUTION TIME 10 ms 
BY REQUIREMENTS temperature_tolerance 
DESCRIPTION 
{ The treatment power is equal to the estimated power 
if the treatment switch is true and treatment finished 
is false. Otherwise the treatment power is zero. 


END 


IMPLEMENTATION Ada start_up 
END 
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APPENDIX C. STATIC SCHEDULER DATA FLOW DIAGRAMNIS 


This appendix contains the Data Flow Diagrams (DFDs) for the Static Scheduler. 
The Ist and 2nd level DFDs from Reference [3 provide the groundwork for describing 


the Static Scheduler in Chapter III]. The lower level diagrams represent the proncering 


efforts for implementing the Static Scheduler in Chapter IV of this thesis. 
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Ficure 18. Ist Level DVD 
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Figure 19. 
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2nd Level DFD “Read_PSDL” 
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Figure 20. 2nd Level DFD ”’Process_the_File” 
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Figure 21. 2nd Level DFD “Sort_Topological” 
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Figure 22. 3rd Level DFD ”Create_Lists” 
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Vigure 23. 3rd Level DFD “Sort _Remaining_Operators” 
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Figure 24. 2nd Level DFD ’Build_larmonic_Blocks” 
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Figure 23. 3rd Level DFD ”Cale_Periodic_Equivalents” 
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Figure 26. th Level DFD ”“Locate_Sporadic_Operator” 
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Figure 28. 3rd Level DFD “Sort_by_Period” 
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Figure 29. 3rd Level DID ”Find_Base_ Blocks” 
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Figure 30. 4th Level DFD ’Create_Period_Sequence” 
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Vieure 31. 4th Level DFD “Create_Blocks” 
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> BLOCK_ BLOCK 
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Figure 32, 3rd Level DFD ”Find_Block_Length” 
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Vigure 33. 4th Level DFD “Harmonic_Block_ Algo” 
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Figure 34. 2nd Level DFD ”“Schedule_Operators” 
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Figure 36. 4th Level DED ”Calc_Half_Periods” 
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Figure 37. 4th Level DFD “Calc_Total_ Time” 
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Fieure 38. 4th Level DED ”’Calc_Ratio_Sum” 
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Figure 39. 3rd Level DFD “Schedule_Initial_ Set” 


CREATE_ 
—_—_————P | INTERVAL 





Figure 40. 4th Level DFD ’Create_Interval” 
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Figure 41. 3rd Level DFD “Schedule_Rest_of_Block” 
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Figure 42, 4th Level DFD ’Verify_Lower” 


CREATE_ 
INTERVAL 
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APPENDIX D. 


AG PROCESSOR SOURCE PROGRAM 


The following AG Processor source code represents an adaptation of the Kodiyak 


AG translator generator specifically designed for the Static Scheduler. Its primary ob- 


jective is identification and retrieval of only the critical operators and their timing con- 


Straits from the PSDL prototype source program. 


*define Digit hoo) 
%define Int pe) acetate) 
“define Letter ¢(a-zA-Z_]} 
*define Alpha : ({Let ter} |{Digit}) 
“define Blank 2D Sie Sal) 
yaefine Char aie 

:{Blank}+ 
TYPE ey eee 
OPERATOR : operator |QPERATOR 
SPECIFICATION PspeGre cation |oroclr LGATION 
END : end | END 
GENERIC : generic|GENERIC 
EN PUT Siipuc EN eUL 
@UTPUT TOumoUE OUP UT 
STATES wotaees sla) io 
INITIALLY : initially| INITIALLY 
EACEPTIONS : exceptions | EXCEPTIONS 


MAX_EXEC_TIME 


:maximum{ Jexecution[ ]time 


|MAXIMUM[ JEXECUTION([ JTINE 
>maximum[ Jresponsef[ ]Jtime 
| MAXIMUN[L JRESPONSE[ JTIME 
>minimum[ Jcallingf[ ]Jperiod 
|MINIMUM( JCALLING[ JPERIOD 


Ma RESP_TIME 
MIN_CALL_PERIOD 


BY >by[ Jrequirements|BY[ JREQUIREMENTS 
KEYWORDS : keywords | KEYWORDS 

PooecklPTION : description|DESCRIPTION 

AXIOMS ; axioms | AXIOMS 

TEXT : {Char}* 

INPLEMENTATION : imp lementation| IMPLEMENTATION 
GRAPH : graph | GRAPH 

DATA_STREAM :datal Jstream|DATA[L ]JSTREAM 

GER : timer|TIMER 

CONTROI, :control[{ Jeonstraints|CONTROL[ JCONSTRAINTS 
TRIGGERED : triggered |TRIGGERED 

IF Sif | IF 

FERLOD : period|PERIOD 

FINISH > finish[ Jwithin|FINISH[ JWITHIN 
OUTPUT Zoveome |OURE UT 

fe cEPT ION : exception | EXCEPTION 

RESET : reset |RESET 

START Sstarelo lART 


8] 


STOP Stop len 





ALL :by[ jJally setae 
SOME :by[ Jsome|PY[{ JSOME 
Pe ROSEe :mnicrosec MICOS S 
MS >ms | MS 

SEC >sec|SEC 

MIN >min|MIN 

HOURS - hours | HOURS 

ADA 

ARROW 

TRUE : true | TRUE 

FALSE : false| FALSE 

AND : "8!" "and" |"AND" 
OR soi ee an. 

NOT s'~ | noc | Nore 
ID weeatterl(Al pial: 
INTEGER_LITERAL {Int} 
REAL_LITERAL -(Int}". "tint 


! operator precedences 


MLelt Niel. 
Pert OR: 

*%left AND; 
wLete NOT; 


oa 
/0/0 


! attribute declarations for nonterminal symbols 


Start. (brn strane. |: 
pod. Cen.  sGema. |. 
Gonpouent’ Mo trnw serie). 
datagry pe {trmir String isl: 
Operator ( {rn: stress, 
EyperSpec.4 ‘trn: “String. |: 
optional type dec] { try strinoewe. 
Opliast: 4 trmst Strano 
Operatorospec, ( Utne “serine, |: 
Pi cerrace:. (trie Strine.s): 
avtui bute. (ibGn-ces eimme.e 
attribute list: { trn: sSseringee. 
penericiuparam { Crm: String ae. 
HB 9H] 0 bogie | ait c) plpeamnny bane hq Nea) amie 
GUEPUC. <C “Ett ssi tie es: 
States tr estas. 
exCepEiens 4 strns suri). 
id= ist {Vern eseriny =. 
lilac execs time | trn:  Strincwe. 
naxoresp_time { trn: Stine 
Mil periecd { Cunt, serine 
time { value: int; 

Gin: Stine. 3s 
lite {  Cienee oe bane 








feiesmiacace | Crn: String; }; 
mee tonaiiey | trn: string: }; 
meywords { Grn: String; 7; 
tierormal desc { trnm: String; }; 
Beumnaledesc { trn: string; }; 

me oesimpl { trn: string, }; 
eoeamp) list { trn: string; }; 
Spetacor_impl { trn: string; }; 
esdi_impl { trn: string; }; 

Gata tlow_diagram { trn: string; }; 
meniks { trn: stringy) }; 

Sereams { trn: string; }; 

mrpe deci { trn: string; }; 
type_name { trn: string; }; 

memers { trn: string; }; 

semerol consteraints { trn: string; }; 
Boemstraints { trn: string; }; 
Semseraint { trn: string; }; 
Meizcer { trn: string; }; 

eos Crn: String; }; 

Bewiod { trn: string; }; 

Peis { trn: string; }; 

eeeoutcs { trn: string; }; 
Paecotion_oOps { trn: string; }; 
mimer ops { trn: string; }; 
eemer_op { trn: string; }; 
eeemcrigoer constraint { trn: string; }; 
eedicate { trn: string; }; 
expression { trn: string; }; 
eegemessiion list { trn: string; }; 
Soma { trn: string; }; 
Seelreqnts_trace { trn: string; }; 
opt_unit { value: int; 

Eine “Ser tile; 75 
opt_keywords { trn: string; }; 
Soeetormal desc { trn: string; }; 
apolsinformal_ desc { trn: string; }; 
Setestreams { trn: string; }; 
Semeewiers { trn: string; }; 
eeeecontrol_constraints { trn: string; }; 
Beeecime { trn: string; }; 
Meteerigger { trn: string; }; 
Seercond { trn: string; }; 

@eeeperiod { trn: string; }; 
Spicer inish { trn: string; }; 


fattrbute declarations for terminal symbols 
Mee ocext: string; }; 


Meck R LITERAL { 4text: string; }; 
REAL _LITERAL { %text: string; }; 


or OY 
{oo 


!psdl grammar 


start 
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psdl 
{ OUtPUC( DSa eae) ae 


psdl 
psdl component 
{ psdl[l].trn = [ psdl[2}. trn, compotiemen: cima 


{ psd] ijeecn ae 
component 

data_type 

{ component.trn = ""; } 


| operator 
{ COMpOnent. tra — "operator emi as 


TIPE TD ey pens pec Hee imp | 
{ data_type.trn = ""; } 


Ww @ 


ODeEACOr 
: OPERATOR ID operator_ spec ANN OE imp | 
{ operator.trn = [ID  ,ID. %text ,operator_ spec. trn, 
operator anes eeaidl ey) 
3 


eyperspec 
: SPECIFICATION optional_type_decl op_list functionality END 
{ type_spec. trn = [ optional _type_decl. tin, coploiisc) eam 
functionality. crm si 


3 


optional_type_decl 
type_decl 
{ optional_type_decl.trn = type_decl.trn; } 


{ optional_type_decl.trn = ""; } 
Op stisct 

op_list OPERATOR ID operator_spec 

{oo Mistillecenm =< 

{ opolistil).trn =: Se 


) 
Operator 2spee 


SPECIFICATION interface functionality END 
{ operator_spec.trn = [{ "SPEC ° ,interface, tr 2) ae 
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interface 
qeeribite: list 
(euieeritace(i jeter = attripute list.trn; } 


d 


attribute_list 
attribute_list attribute opt_reqmts_trace 
(Bocert bute listpl|) erm —lateribute. list[Z]}.trn, 
Geb piteetEnOprereqmes trace. Crnj; } 
| tttt 


(eaberIbuceslist.trn = ya 
) 


Spr reqmts trace 
reqmts_trace 
(OD ecErcdMesmcrace.trm = Geqnes_Crace, trn; } 


{ opt_reqmts_trace. trn = oe } 


e 
3 


attribute 
> generic_param 
(aterroueer tern = - | 
| input 
(faeeetpice.trm = *< } 
| fehiiejobue 
(oceEiomeemrrn = 3h 
| states 
(SdEGribube., tErn = states.trn; } 
| exceptions 
{ attribute.trn = ""; } 
| max_exec_time 
{ attribute. trn = max_exec_time.trn; } 
itaxonecp tame 
| { attribute.trn = max_resp_time. trn; } 
min_period 
(eacerlouce.trn = min period. trn; } 


’ 


generic_param 
GENERIC type_decl 
{ generic_param. trn = type_decl.trn; } 


input 

INPUT type_decl 

Pipi ern — Eype deci trn;, } 
output 

OUTPUT type_decl 

MROUEPUE stern — type dec! trns } 
states 


STATES type_decl INITIALLY expression_list 
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{ states.trn = { STATE (, type declme nase 
’ 
exceptions 


EXCEP UIONS. tds ore 
{ exceptions. trn = [ “JUNK | ides tee 


sai 3S 1e 
Teg Misia 00 
( 3d list( 1) tenes ae 
ID 


{f id-listl lj. ern = ebb ee 


max_exec_time 
MAX _EXEC_ TIME time 
{ max_exec_time. trn 


("MET “,i2s€time. ema 
max_resp_time 

PASS R EOF fre cece 

{ max_resp_time. trn = [MRT “,i2s(timenteaia 


° 
5 


min_period 
MIN_CALL_PERIOD time 
{ min_period. trn = ["MCP ",i2s(time.trn)]; } 





time ; 
INTEGER LITERAL opt aimee 
{ time. trn = s2iC( INTEGER_LITERAL. %text) * optluniesvarae: 
tine.trn = i2s (time. value); } 
Open 
Hogs Debs bo 
| { Optlunit. trn = wit. crn. 
optainit. tin = 2 
Wit 
MICROSEC 
(uch btm ls 


| MS 
{ nnit.trn = "1000"; } 


ress S16 

f unit. trn = "1000000"; } 
| MIN 

{ unit. trn = "60000000"; } 
| HOURS 


{ unit. trn = "3600000000"; } 
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BeciEs.Crace 
Beak isit | 
(eecamtsueracesern = | JUNK ,id_list.trn ]; } 


3 


functionality 
opt_keywords opt_informal_desc opt_formal_desc 
{ functionality. trn = [ opt_keywords. trn,opt_informal_desc. trn, 
opt_formal_desc.trn ]; } 


opt_keywords 
keywords 
{ opt_keywords. trn = keywords. trn; } 


| ttt, 


{ opt_keywords.trn = 3 } 
; 
opt_informal_desc 


informal _desc 
(POvtEmintormalki dese trn = informal desc: trn;} 


{ opt_informal_desc.trn = ""; } 
; 


opt_formal_desc 
formal_desc 
{ opt_formal_desc.trn = formal_desc.trn; } 


{ opt_formal_desc.trn = ""; } 


keywords 
KEYWORDS id_list 
Wreywoudsetin = { JUNK ,id_list.trn J; } 


b 


informal_desc 
DESCRIPTION '{' TEXT yo 
(@iaeernaladescytrn =; } 


CY) 
3 


formal_desc 
Osea EXT 
{ formal_desc.trn = ""; } 


3 


type_impl 
IMPLEMENTATION ADA ID 
{ type_impl.trn = ""; } 
| IMPLEMENTATION type_name op_impl_list END 
{ type_impl.trn = [type_name. trn,op_impl_list. trn];} 


s 
3 


Boeimpl list 
op_impl_list OPERATOR ID operator_impl 
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{ op_impl_list( i) oni 
[ "JUNK " ,operator_ imple emamne 
| Wit, 4 


{ op_impl_list{l].trn = ve 


e 
b 


operator_impl 
IMPLEMENTATION ADA ID 
{ operator imp l.tene—e eet 
| IMPLEMENTATION psd]l_imp|! 
{ operator_impl. trn = ['IMPL ",psdl_impl. trn]; } 


e 
b) 


psdl_impl 
: data_flow_diagram opt_streams opt_timers opt_control_constraints 
opt_informal_desc END 
{ psdl_impl.trn = ([data_flow_diagram. trn,opt_streams, time 
opt_timers. trn,opt_informai_desc. crap 
opt_control_constréints. tin) END jae 


{psdl_ impli. tray =) 


data_flow_diagram 
GRAPH links 
{ data_ftlow diageam.trn = Pinks. tra.) 





links 
links ID '." op_id ARROW ID 
{ links[1]. trn = ["LINK ",1D.%text, 2) jeoomrceseaae 
UARROW SIMs 2texclom: 
| 
flinks(l)-trn-— se ; 
Op id 
[Db 2 Sopeet ime 
{ op_id.trn = (1D. %text,” © ",eptmtamese nna ae 
P 
| ID 
(opids trn- = 1), ee exc 
cpt_time | 


time 
{ opt time. trn = time. trn. | 


{ opt_time.trn = ""; } 
- 
Ope =Seredams 


streams 
{ opt_streams.trn = streams. trn; } 


f opt streams. tine-s «ae 
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opt_timers 
timers 
(Wepeectimers. tin = timers. trn; } 


Mopeeeinersstrn =a.) 
’ 
eoLecontrol constraints 


COMEEO CONS cranes 
ODescolroOlmeconstraintswtrn — Control constraints. trn; } 


(@apescontroleconsttaints, tin = 3 } 


streams 
DATA_STREAM type_decl 
{ streams. trn = type_decl.trn; } 
type_decl 
trpcmccoime Sauelist, © type name 
Gepedeelpieean — — JUNK j,1d list.trn i; } 
| id_list ':' type_name 
(ee pewdeciiiwetin =f JUNK  ,id_list.trn |; } 
type_name 
{ type_name.trn = |"; 
| ID '[' type_decl a 
{ type_name.trn = "3 } 
timers 


TIMER ide list 
(camenssern = (| JUNK .id_list,trn.];..} 


. 
3 


eont1ol constraints 
CONTROL constraints 
(Beonuco ueconstraints, trm = constraints. trn; } 


3 


constraints 
COMSETAINLES constraint 
(Vcolsermaimes, t|. trn = [| constraints, 2|:trn, 
COlstcaime.trn |; } 
| tt. 


(Weonstraines. tri. = oo ep 
’ 


constraint 
OPERATOR ID opt_trigger_constraint opt_period 
opt_finish outputs exception_ops timer_ops 
@eonserointp uj scrn — pl) , 10) Ztext,opt trigger constraint. trn, 
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opt_period. trn,opt_finisit. rn, Out pio 
exception_ops. trn, Cimer ops, Cire 
) 
opt_trigger 


trigger 
{ Opt_trigger.trn = triczersewi ae 


DOUG, 


{ Opeltriccersecn = a 
opt_period 


period 
{ Opt_period- tran 


period. trn; } 
{ opt period: trme= ee 
; 
Sie em aol olitcrs! 
rinish 
) {Op ee tis ile Gren 


{Ope .tinisn. em. ee } 


PAMAS St en: 


ed 


opt_cond 
cond 
{ Opt.cond. trn 


cond brn.) 


f opt_cond.trn = “; } 
; _ 
Ope Crigeer .consteraing 
TRIGGERED opt_trigger opt_cond opt_reqmts_trace 
{ opt_trigger_constraint.trn = [ opt_trigger. trn,opt_condweaae 
opt_reqmts trace. trme| am 
| ttt 


{ opt_trigeer constraimtetrcn = | 





cond 
IF predicate 
{ coud.trn = predicate.trn; } 
period 
: PERIOD time opt_reqmts_trace 
{ period. trn = [PERIOD ",time. trn,opt_reqmts_trace. trn]; } 
; 
finish 
FINISH time optiteqmismiGma ce 
{ finish. trn = [FINISH ",time. trn,opt_reqmts_trace.trn]; } 
; 
OUEPULSsS 


90 


Secours OUIEUP Tavlistecond opt_reymts_trace 
Moments! Metra — | —GUNK ,id List. trn),cond.trn, 
Gprsreqmts trace. trn |; } 


(omeoucs|! |. bru — a a 


3) 


exception_ops 
exception_ops EXCEPTION ID opt_cond opt_reqmts_trace 
(eexceDeETONSObSs|( | crm. — ieopeecond., rn, 
Cprmneqntsmcrace. Cri 1,9} 
| 


(e-ception ops ij. trma= | 3} 


timer_ops 
timer_ops timer_op ID opt_cond opt_reqmts_trace 
Pe eceOosf tit = [— timer op, trm,opt_cond.trn, 
Speesconessbrace. trn |; | 
| tet: } 


{ timer_ops(1].trn = : 


3 


timer_op 
RE oe. 
miinermoostrin— * } 
| SA EE 
{ timer_op.trn = ""; } 
po silos 
(PteimerlOp. urn = een 


Eulorer 
UGE sole He koe 
(Sone eer, Cin. 
MoOMbsido list 
{ trigger.trn 


Pees wid list, trn 7; } 


iI 
mom 


Uke tdalistwtrcn |: } 


tl 
‘om 


) 


predicate 

NOT predicate prec NOT - 
(oredtcate(litim —  . > 

| predicate AND predicate “prec AND 
{ predicate[l].trn = ""; } 

| predicate OR predicate %*prec OR 
Momecdtcatrellitrm =) ; } 

| expression 

! OT aa ea = expression. trn; } 
cS ad. list 
Veocedacave( |]. trn 


ies tC. Eri. a} 
expression 
PNGEGER I GETERATL 


{ expression. trn = ""; } 
| TRUE 


3h 


= 


tent 
* 


{ expression. trn = ae 

| FALSE 

: { express iced =", 3 
{ expression, tume— = 

| type_name '.' ID '(' expression_list ")' 
{ expression. trn = ""; 


3 


expression_list 
e ° t t a 
: expression_list , expression 


{ expression_list{1l}.trn = °"; } 
| expression 
{ expression_list[l],t:m = "= 4} 


. 
3 





APPENDIX E. STATIC SCHEDULER PSEUDOCODE LISTING 


The following Static Scheduler pseudocode represents a guideline for implementing 
an executable Ada® program. Precise naming conventions for programm units, file and 
Paraivpes, and Ada® EXCEPTIONS specifically relate to the Static Scheduler. Chap- 
ters III and IV of this thesis outline the underlying assumptions and concerns that were 


considered during development of this pseudocode. 


package FILES is 


type DATA_STREAM is new STRING ( 1..40 ); 
Bepe OFERATOR ID as new STRING ( 1..40 ); 
moe VALUE is new STRING ( 0..10 ); 

type MET is VALUE; 

type MRT is VALUE; 

type MCP is VALUE; 

type PERIOD is VALUE; 

type WITHIN is VALUE; 

type STARTS is VALUE; 

type STOPS is VALUE; 

type LOWERS is VALUE; 

type UPPERS is VALUE; 


eype LINKS is 


record 
THE_DATA_STREAM : DATA_STREAM; 
ibe ikoleOP i> ~; “OPERATOR ID: 
(ibe LUNK MET sete? == 0: 


THE_SECOND_OP_ID : OPERATOR. ID; 
end record; 


type OPERATORS is 


record 
TiE@OPERATOR_1D 9: OPERATOR ID; 
ci MET elas b = 0; 
ie MRT SRT = 0; 
ite CP 5 jl ee = 0; 
THE_ PERIOD eR OD 7 = 0- 
ihe WITHIN owl DN = 0; 

end record; 

mype FRECEDENCE_LIST is 

Becoxrd 
Pie she ba Ore) See OPERATORS 1D: 
OVER LeIT SOP aI =) OPERATOR ID; 


end record; 


type SCHEDULE_INPUTS is 
record 


28 


OPERATOR : OPERATOR_ID; 


THES TART : "STARTS" 12==0; 
THB STOR > SOEs = 0; 
THE_ LOWER : LOWERS = 0; 
HIRCUREER SeUPPERS = 0; 


end record; 
end: PLES: 


Wien TEX Sto: 
package PSDL_READER is 


procedure INVOKE_AG_PROCESSOR ( PSDL_PROG : TEXT_IO. IN_FILE; 
| AG_OUTF1LE : TEXT_10.OUT_FILE ); 
procedure READ_THE_FILE ( AG_OUTFILE : TEXT_IO. OUT_FILE ); 


end PSDL_READER; 


che Wi oe: 
WLEAOF LLG: 
package FILE_PROCESSOR is 


procedure SEPARATE_DATA (AG_OUTFILE : TEXT_I0O. IN_FILE; 
LINKS : TEXT_10. OUT_FILE; 
OPERATORS : TEXT_IO. OUT_FILE; 
NON_CRITS : TEXT_{[0. OUT_FILE ); 

procedure VALIDATE_DATA ( OPERATORS : TEXT_IO. IN_FILE ): 


He hOUALS@r ER LOD > exception; 
MET_NOT_LESS_THAN_MRT : exception; 





end FILE_PROCESSOR; 


waite PF 1Les: 
Wael, i le hO: 
package TOPOLOGICAL _ SORTER is 


procedure CREATE_LISTS ( LINKS : TEXT_10. IN_FILE; 
PRECEDENCE_LIST : TEXT_10. OUT_FILE ); 
procedure SORT_REMAINING_OPERATORS ( PRECEDENCE_LIST : 
TEXT_10, OUT aaaaini 
LINKS : TEXT_IO. IN_FILE ); 


NO_TNITIAL_LINK_OP : exception; 
NO_MATCHES_FOUND : -@xcent ion: 


end TOPOLOGICAL_SORTER; 
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with FILES; 
nackage HARMONIC_BLOCK_BUILDER is 


procedure CALC_PERIODIC_EQUIVALENTS ( OPERATORS : 


Dei eee Po ); 


meoceaure SOh1 By PERIOD ( THE PERIOD : in out CPERATORS ); 
meocceaure PIN BASE_BLOCK ( THE_PERIGD : in owt OPERATORS; 

BADE bLOGK. mmole Ul bEGe he). 
procedure FIND_BLOCK_LENGTH ( BASE_BLOCK : in out INTEGER; 

HARMONIC. BEGCKSEENGIN:: out INTEGER ); 


CONSTRAINTS_INVALID : exception; 
NO_BASE_BLOCK ; exception; 


end HARMONIC_BLOCK_BUILDER; 


ota FILES; 
package OPERATOR_SCIEDULER is 


procedure TEST_DATA 

meocedure SCHEDULE INITIAL SET ( PRECEDENCE_LIST : 
SCHEDULE_INPUTS : 
CONTINUE : 
THE_NET : 


procedure SCHEDULE_REST_OF_BLOCK ( SCHEDULE_INPUTS : 


THE_MET 


procedure CREATE_STATIC_SCHEDULE (SCHEDULE_INPUTS : 
STATIC_SCHEDULE : 


FAIL_HALF_PERIOD : exception; 
pao TOTAL TIME > exception; 
RATIO_TOO_BIG > exception; 
OVER_TIME ; exception; 
INVALID_SCHEDULE : exception; 
SCHEDULE_ERROR > exception; 


end OPERATOR_SCHEDULER; 


peteh TEXT_IO0; 

Cememe £1 LES; 

ween PSDL_READER; 

Pee F LLE_ PROCESSOR; 

with TOPOLOGICAL_SORTER; 

with HARMONIC_BLOCK_BLUILDER; 
with OPERATOR_SCHEDULER; 


procedure STATIC_SCHEDULER is 
mask INITIATE STATIC_SCHEDULER; 


begin 


Oe 


ee TO ie ihe. 
iw LO OU ee ini; 
in out BOOLEAN; 
POC UE MRA TORS  )s 
TEST bos OU REL LE: 
iN OWt CPBRATORS }; 
MDE BU UR Lae 
Teta resCUieri Le): 


task body INITIATE_STATIC_SCHEDULER is 
begin 

aCeeol Suse Le: 
end INITIATE _STATIC_SCHEDULER. 


PSDL_READER. INVOKE_AG_ PROCESSOR; 
PSULIREADER, Kosta nhe ob Die 
FILE PROCESSOR: SEPARA TOA AY 
FILE_PROCESSOR. VALIDATE_DATA; 
TOPOLOGICAL _ SOGRIER. CREA teers: 
TOPOLOGICAL_SORTER. SORT_REMAINING_ OPERATORS; 
while not END_OF_FILE loop 
HARMONIC_BLOCK_BUILDER. CALC_PERIODIC_EQUIVALENTS: 
end loop; 
HARMONIC. BLOCK_BUILDER. SORT_BY_PERICD; 
HARMONIC_BLOCK_BUILDER. FIND_BASE_BLOCKS; 
HARMONIC_BLOCK_BUILDER. FIND_BLOCK_LENGTH; 
OPERATOR_SCHEDULER. TEST_DATA:; 
OPERAICR SCHEDULER, SCHEDUDiaa wT Lia cm 
OPERATOR SCHEDULER. SCHEVUEE Kester aoe. 
OPERATOR. SCHEDULER: CREATE soe iG eo ea eure 


exception 
when FILE _PROCESSOR. MET_NOT_LESS_THAN_MRT => 
PUT_LINE ( "Cannot allow MET larger than or equal to MRT.” ); 
exception 
when FILE_PROCESSOR. MET_EQUALS_PERIOD => 
PUT_LINE ( "Cannot allow MET equal to period." ); 
exception 
when TOPOLOGICAL_SORTER. NO_LINITIAL_LINK_OP => 
PUT_LINE ( "Cannot locate the initial” link statements oF 
exception 
when TOPOLOGICAL SORTER. NO_MATCHES_FOUND => 
PUT_LINE ( "Cannot locate any link statements after the first. ); 
exception 
when HARMONIC_BLOCK_BUILDER. CONSTRAINTS_INVALID => 
PUT_LINE ( "Cannot build schedule with given constraamtus. am 
exception 
when HARMONIC_BLOCK_BUILDER. NO_BASE_BLOCK => 
PUT_LINE ( "Cannot schedule incompatible operators. ); 
exception 
when OPERATOR_SCHEDULER. FAIL_HALF_PERIOD => 
PUT_LINE ( "Cannot guarantee schedule will be feasible." ); 
exception 
when OPERATOR_SCHEDULER. BAD_TOTAL_TINE => 
PUT_LINE ( "Cannot glarantee schedule will be fedsableu ae 
exception 
when OPERATOR_SCIEDULER. RATIO_TOO_BIG => 
PUT_LINE ( "Cannot guarantee schedule will be feasible.’ 
exception 
wnen OFCRALOR SCUEDULER OVER. fiir —= 
PUT_LINE ( "Cannot create schedule with parameters given. | pe 
exception 
when OPERATOR_SCHEDULER. INVALID SCHEDULE => 
PUT_LINE ( "Cannot create schedule with parameters given." ); 
exception 
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when OPERATOR. SCHEDULER. SCHEDULE _FRROR => 
PUT_LINE ( "Cannot create schedule with parameters given." ); 


ene 514) EC SCHEDULER; 


woth TEXT_I[0; 
package body PSDL_READER is 


A_WORD : STRING; 


mreocedure INVYOKE_AG_ PROCESSOR ( PSDL_PROG : TEXT_IO. IN_FILE; 
Comecii hho. = Tee lrO.OUTLFILE ); 

begin 

-- Run the compiled AG program 

-- using the PSDL_PROG as its input 

-- to create the AG_OUTFILE as its output 


end INVOKE_AG_PROCESSOR; 


Procedure READ _THE_FILE ( AG_OUTFILE : TEXT_IO. IN_FILE; 
(RASH IPILE : TEXT_LIO. OUT_FILE; 


begin 
OPEN ( AGZOUTPILES TEXI_10-, IN-FILE ); 
Peal beet RAoier bobs TEAM LO; OUT FILE ); 
while not TEXT_IO. END_OF_FILE loop 
GET (€ A_WORD[i] : out AG_OUTFILE ); 
if A_WORD[i] = "JUNK " then 
begin 
FUSCA WORDTi] 7 ino F CLE )s 
POT Sree WwORDii+1) ine TRASH FILE.) 
end; 
etic it: 
A_WORD[i] := A_WORD[it+t1]; 
end loop; 


end READ_THE_FILE; 


end PSDL_READER; 


cae TEXT_IO; 
package body FILE_PROCESSOR is 


procedure SEPARATE_DATA ( AG_OUTFILE : TEXT_IO. IN_FILF: 
LINKS me osOum.F TLE: 
OPERATORS : TEXT_IO. OUT_F1LE; 
NON_CRITS : TEXT_IO.OUT_FILE ) is 

NEW_WORD : STRING; 

THE_STATE : STRING; 
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begin 
OPEN CAG OUTEFILE, TEX] [oat ees 
CREATE ( LINKS, TER OU To Tee). 
CREATE ( OPERATORS, TEXT {10300 (a ire), 


while mot TEXT [0,ENpaCr FILES teos 
GET ( NEW_WORD[i] : out AG_OUTFILE ); 
if NEW_WORD[i] = “ID © then 
PUT ( NEW _WORD[iti] : in OPERATORS. THE_OPERATOR_ID ); 
elsif NEW_WORD[i] = “STATE ™ then 
THE_STATE := NEW_WORD[i+1] 
elsif NEW_WORD[i] = "MET " then 
PUT ( NEW _WORD[i+1] : in OPERATORS. THE_MET ); 
elsif NEW_WORD[i}] = “MRT " then 
PUT ( NEW _WORD[i+1] : in OPERATORS. THE_MRT ); 
elsif NEW_WORD[i] = "MCP " then 
PUT ( NEW_WORD[i+1] : in OPERATORS. THE_MCP ); 
elsif NEW_WORD[i] = "PERIOD " then 
PUT ( NEW_WORD[iti] : in OPERATORS. THE_PERIOD ); 
elsif NEW_WORD[(i] = "WITHIN " then 
PUT ( NEW_WORD{i+1] : in OPERATORS. THE_WITHIN ); 
elsif NEW_WORD[i] = "LINK " then 
begin 
if NEW_WORD[i+3] = THE_STATE and 
NEW_WORD[i+7] = THE_STATE then 


begin 
-- Discard this link statement since 
-- it represents a state machine. 
-- Increment NEW_WORD. 
end; 
else 
PUT € NEW_WORD[it1]] : in LINKS THEDDATA ST REATe 
PUT ( NEW_WORD[it+3] : in LINKSSUHE FIRST ZOr Ie 


if NEW_LWORD[it4] := " : " then 
PUT ( NEW_WORD[i+5] = in LINKS, THE Like 
else 
PUT ( NEW_WORD[i+7] : in LINKS. THEZSECONDSOP STi 
end if; 
end if; 
end; 
else NEW_WORD[i] := NEW_WORD[it+2]; 
end if; 
end loop; 


CREATE ( NOT CRITS, | TEXD Oe o0 ae eee 
while not OPERATORS, ENDSOR Sh ILE Sloop 
if THE_MET£i] = null STRING then 
PUT ( THE_OPERATOR_ID[ a] = an NONSGR ise 
erica f. 
THES MET[ i= EUE MET (a. 
ends loop: 


end SEPARATE_DATA; 
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procedure VALIDATE_DATA ( OPERATORS : TEXT_IO. IN_FILE ) is 


begin 
OPEN  (e ORERATORG= Pax? 10. IN_FILE )}; 
while not OPERATORS. END_OF_FILE loop 
CED ( DHE seem: out OPERATORS ); 
ie WitencCeliy nor 0 then 
begin 
CoG ibeninipa) < soul “OPEKATORS —); 
if THE_MRT[i] = 0 then 
begin 
GED (tbewITHiNiz] : out OPERATORS ); 
if THE_WITHIN[i] not= 0 then 
THE Miike Cee eH TEN] aj; 
end if; 
end; 
else 
Ce tier lOUida |e emout OPERATORS ); 
Pie os = Leer OU i a): 
end if; 
end; 
endef 


-- Two additional "if...then" loops similar to the above would 
-- also appear here within the loop. 

-- (1) Verify that MET not = period, 

-- else raise the exception MET_EQUALS_PERIOD. 

=- (2) Verify that MET < MRT, 

== else raise the exception MET_NOT_LESS_THAN_MNRT. 

end loop; 


end VALIDATE_DATA; 


end FILE PROCESSOR; 


wea TEXT 10; 
package body TOPOLOGICAL _SORTER is 


mmocedute GREAIB LISTS ( LINKS : TEXT_IO. IN_FILE; 
PeoCeDE NG eels t ss TEXTL1O,OUIL.FILE ) is 
begin 
Seen CeEReCeDENCE LIST, TEAT_I0. OUT_FILE ); 
Pranet GiNes, TEXT_10. IN_FILE ); 
while not LINKS. END_OF_FILE loop 
CV etiqmtanoleOr [Di] : Owes ); 
Hoop! MinUsALL SECON) _OP_IDS 
Cision CONDeOP TD )] !oue LINKS); 
eee not OP ID] mever= Iti SECOND OPLID[ j] then 
begin 
Ee ier bo Pale i nePREGE UENO List. fHs LEFL_OP_ID ); 
Eee oseeND OPPs) sein PRECEDENCE LIST. THE RIGIIT_OP_ID); 
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end; | 
ois 
THE_FIRST_OP_ID[i] = any cf THE SECOND SOP RI Re meme 
exit this iteration and try THE_FIRS] OPPs 
end loop; 


exception 
when PRECEDENCE_LIST = null => 
raise NO_INITIAL_LINK_OP; 
(exit and terminate the Static Scheduler) 


end CREATE Sis ko 


procedure SORT_REMAINING OPERATORS ( LINKS > Gig 10 sie 
PRECEDENCE_LIST ; TEXT [OsCUI=S ee 
begin 
GET ( THE_RIGHT_OP_ID[i) : “ent*PREGEDENGES io ar 
while not PRECEDENCE_LIST. END_OF_FILE loop 
~- Comparisons similar to procedure CREATE_LISTS would 
-- go here but in this case you want to find ins ctamees 
~~ where THE_RIGIT_OPlIU[ i) Cae Cer Gare ae 
“< THE FIRS T2CP iD) i erie 
if a match is found then 
THE LEFT _OP_ ID i+ lee REG DENG he Li Sie — 
THESE IRS TOPS IDit tie b ako wand 
THE RIGHT SORSID[ 141 PRE CED aC meme ome 
THE=SECOND=SOF {IDEs ii) Erik 
end if; 
THE_RIGHT_OP_ID{i].: = THESRIGITSOP SI iar 
end loop; 


exception 
when PRECEDENCE_LIST contains only an initial entry => 
raise NO_MATCHES_FOUND; 
(exit and terminate the Static Scheduler) 





end SORT_REMAINING_OPERATORS; 


end TOPOLOGICAL_SORTER; 


package body HARMONIC_BLOCK_BUILDER is 


procedure CALC_PERIODIC_EQUIVALENTS ( OPERATORS : TEXT_IO. INF TEs 
begin 


procedure LOCATE_SPORADIC_OPERATOR 
begin 
GET (€ THE MCP[i] >: cWeROEERATORS. >): 
LE Found 
GET ( THE _PERIOD[i] : owt OPERATORS a. 
if THE SPERIOD( i] not=— OF chen 
begin 
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restart the loop, this is already a periodic knees 
Cole tiinme Git it | moult ORERATORS ); 
end; 
else 
CEreC THESMREpij] 2 out OPBRATORS =); 
Bee weeks) = 0 then 
begin 
JG Oy eS 00) ere 
VE aes | -: 
end; 
end afk: 
else 
all operators are already periodic 
exit this package 
end if; 


Oo 


DimevlaniNideor if no within in file 
THE METI ij; 


end LOCATE_SPORADIC_OPERATOR; 


procedure VERIFY_1 is 

begin 
Clee Tis sCrii: out ORERAIGRS ): 
eee LHR MR eel: vOuG OPERATORS J: 


exception 
when THE _MCP[i] >= THE_MRT[i] => 
raise CONSTRAINTS_INVALID; 
(exit and terminate the Static Scheduler) 


-- Two additional checks are structured the same as above 

-- (1) verify that THE_MET[i] < THE _MRT{1i} 

-- (2) verify that THE_MET{i] < THE_MCPT{i] 

-- both (1) and (2) will raise exception CONSTRAINTS_INVALID 


end VERIFY_1; 
procedure PERIOD_ALGO is 


DIFFERENCE : STRING; 
NEW_PERIOD : STRING; 


begin 

DIPPER ENGE s=— THESMRI( i] = THE MET i}; 

Por Oot eMCr a} and DIFFERENCE > THE NET{i] then 
NEW_PERIOD[i] := DIFFERENCE; 

else 
NEW_PERIOD[i] := THE_MCP[i}]; 

end if; 

Ber NGWePERTOD[ i] : in OPERATORS. THE_PERIOD[i} ); 


end PERIOD _ ALGO; 


end CALC_PERTODIC_EQUIVALENTS; 


procedure SORT _BY_PERIOD ( THE_PERIOD : in out OPERATORS ); 
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begin 
perform_sort in ascending order based on THE_PERIOD in OPERATORS 


end SORT_BY_PERIOD; 


procedure FIND_BASE_BLOCKS ( THE_PERIOD : in out OPERATORS; 
BASE_BLOCK : out INTEGERS 


DIVISOR : INTEGER: 
REMAINDER ; INTEGER. 
OR TG2SEOUENGE Sa: -- null sequence 
TEE eoLOURNG Ee: I -- null sequence 
BASE_BLOCK re -- null sequence 
function MOD_DIVIDE ( THE_PERIOD : out ORIG@SSEQUENCE eee aa. 
REMAINDERS 
begin 
toop CREATE PERIODS SEOULNGE 
GET ( THE PERIOD[i) > cugsee ers. 
PUT € THE, PERIOD[i] : in CRUGesnOer Ce 
end loop CKEATE PERIODS SECURNCE, 
loop CREATE_BLOCKS 
GET ( THE PERIOD[i] =: out OR IGeSEOUENGES ): 
DIVISOR 2=)ThEeeER LO a: 
loop INNER 
function MOD_DIVIDE returns RENAINDER is 
REMAINDER += THECFERTOD wie sO Tee... 
return REMAINDER; 
end MOD_DIVIDE; 
if REMAINDER = 0 then 
PUT ( THE PERIOD( 2) 2 in BASEL UEOGK e 
else 
PUT ( THE _PERIODRa) + in TEMP _SEGe2 Ciao. 
end if; 
end loop INNER when the ORLQ_SEQUENCE = 43; == el 


if TEMP_SEQUENCE = {} then return 
-- loop CREATE_PERTOD_SEQUENCE is completed 


elsif 
TENP_SEQUENCE not= {} and DIVISOR not= 1 then 
begin 
ORIG SEQUENCE := BASE_BLOCK OU] TEMP SSEOUnNGE 
end; 
else 


exception 
when TEMP_SEQUENCE not= {3} and DIVISOR = 1 => 
raise NO_BASE_BLOCK; 
(exit and terminate the Static SGencambem 
end loop CREATE_BLUCKS; 


end FIND_BASE_BLOCKS; 
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procedure FIND_BLOCK_LENGTH ( BASE_BLOCK : in ont INTEGER; 


HARMONIC_BLOCK_LENGTH : 


NEW_GCD : INTEGER; 
NEW_LCM : INTEGER; 


LCM INTEGER; 
GCD ee N LEGER: 
ENTRY : INTEGER; 


out INTEGER ) is 


moet ion LIND GCD)t ENTRY ; in BASE_BLOCK ) returns NEW_GCD; 
fjmimetion FIND LCM ( BNIRY ; in BASE_BLOCK ) returns NEW_LCM; 


begin 
GET ( ENTRY[i] : out BASE_BLOCK ); 
Cebos— ENIRY[i}; 
PM; = ENTRY(i); 
Col Tekin yi itt lie= out @BAon BLOCK ):; 
while BASE BLOCK not= {! loop 


me 


function FIND_GCD returns NEW_GCD is 
begin 
while GCD not = 0 loop 
REMAINSI ;= LCM mod GCD; 
REMAINS2 := ENTRY[it1] mod GCD; 
if REMAINSI = 0 and REMAINS2 = 0 then 
begin 
NEW_GCD := GCD; 
return NEW_GCD; 
end; 
else 
Cie  —~Cep = i 
end if; 
end loop; 
end FIND_GCD; 


function FIND_LCM returns NEW_GCD is 
begin 
NEW_LCM := ( LCM * ENTRY{it1] / GCD ); 
return NEW_LCM; 
end FIND_LCH; 


ENERYi a2 = ENTRY(i+1); 
Celene Ni YEr| : Out BASE BLOCK ): 
LCM := NEW_LCH; 
GCD := NEW_GCD; 
end loop; 
HARMONIC_BLOCK_LENGTIL : = LCM; 


end FIND_BLOCK_LENGTH; 


end HARMONIC_BLOCK_BUILDER; 
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Wouiieel BES; 
Wotiesue <4 21). 
package body OPEKATOR_SCHNEDULER is 


procedure TEST_DATA is 
begin 


procedure CALC_HALF_PERIODS ( OPERATORS : TEXT_IO. IN_FILE ) is 


function DIVIDE_PERIOD_BY_2 ( THE PERIOD : out OPERATORS ) Sieeaieae 
iALF_PERITORSs 
begin 


function DIVIDE_PERIOD_BY_2 returns HALF_PERIODS is 
HALF SPER LOD ae Reee. 
begin 
while not OPERATORS. END_OF_FILE loop 
begin 
GET ( THE. PERIOD[i] : cut OPER igloos, 
Gel ( THR iL) 7 elt (ORE. 
HALF_PERIGD == THESPERIOR (an 2. 
if HALF_PERIOD =< TiRED iaieenen 


exception 
raise FAIL_IIJALF_PERIOD; 


erg sit. 
end; 
end loop; 
end CALC_HALF_ PERIODS; 


~ 


procedure CALC_TOTAL TIHE ( OPERATORS : WextolOS tier ai 
HARMONIC_BLOCK_LENGTH : in INTEGER ) is 





LIMES ; UREA 4 020; 
OF Shir 2. Rie, 3 = 020! 
TOTARCTIME AREAL) ae: = 207.0. 


3 
function CALC_NO_OF_PERIODS ( HARMONIC_BLOCK_LENGTH : out OPERATORS; | 
THE_PERIOD : out OPERAVORS ) returns fie 
function MULTIPLY _BY_MET ( TIMES : in out ehieee 
THE_MET : out OPERATORS ) returns OP) tie 
function ADD_TO_SUM ( OP_TIME : in out REAL ) rétehiens TOIAnR aa 


begin 
while not OPERATORS. END_OF_FILE loop 
begin 
function CALC_NO_OF_ PERIODS returns [ules 
begin 
GET ( THE_PERIOD[ i) > in ous ORR iar cuen. 
TINES := UARSONIC_BLOCK_ LENGTH / SRE e PER On iea: 


petiene ft UiE os 
end CALC _NO_OF_PERIODS; 
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funGeron NURI iyepy ii) returns OP_TIME is 
begin 

Come vibetbati)-saneout OPERATORS. ); 

OPER Ee = MHES *~ THE MET! 1); 

ee ell? Ola eabriiss 
ena IOP r ly BY _ MET; 


HincitonenDbealO sum +,eturns TOTAL TIME is 
begin 
DOUAL Cite; = LOTADLTIMNE + OPT IME; 
resin LORARAiiEe: 
end ADD_TO_SUM; 


end; 
end loop; 


exception 
when TOTAL_TIME > HARMONIC _BLOCK_LENGTH => 
raise BAD_TOTAL_TIME; 
(exit and terminate the Static Schedule) 


end CALC_TOTAL_TIME; 


procedure CALC_RATIO_SUM ( OPERATORS : TEXT_IO. IN_FILE ) is 


RATIO : REAL 0. 0; 
RATIO_SUM : REAL 0.0 


b 


minetlon Oly IVE MET BY PERIOD ( THE MET : in owt OPERATORS; 
Mitee reo ain out, OPERATORS ) returns RATIO; 
function ADD_TO_TIME ( RATIO: in out REAL ) returns RATIO_SUM; 


begin 
while not OPERATORS. END_OF_FILE loop 
begin 
fimetron UV IDESMET {BY PERIOD returns RATIO is 
begin 
Cie ribainifii out OPERATORS ); 
Cie CieereR OUP scout, OPERATORS ): 
bie = ticle ible Pik LOD: 
Eetuen hALEG: 
ends Di VIE BY PERTON; 
minicom w)  lOoTIME returns KATIO SUM is 
begin 
Re Toes. = RATLOSSUMN + RATIO; 
return RATIO_SUH; 
end ADD _TO_SUM; 
end; 
end loop; 


exception 


HOS 


when RATIO _SUM = 0) 5.—- 
raise RATIO“ lO0Na TG. 
(exit and terminate the Static Scheduler) 


end CALC_RATIO_SUM; 


end TEST_DATA; 


procedure VERIFY_TIME_LEFT ( HARMONIC_BLOCK_LENGTH : in INTEGER; 
TIME : in INTEGER 
CONTINUE : BOOLEAN ); 
begin 
if TIME >= HARMONIC_BLOCK_LENGTH then 
CONTINUE := FALSE; 
else 


exception 
faise OVERET IE. 
(exit and terminate the Static Scheduler) 


end VERT Yor rie es Lerl 


procedure CREATE_INTERVAL ( THE_PERIODS : in OPERATORS; 
SCHEDULE_INPOTS : TEXY_10. OUT_FI EES ies 


LOWER_BOUND : INTEGER 
UPPER_BOUND : INTEGER 


0} 
0; 


He tl 


function CALC _LOWER ( TIME :“anvent hi feeer 

THE_PERIOD : in out OPERATORS ) returns LOWER_BOUND; 
function CALC_LUPPER ( TIME = Sinvoutce licen: 

THE. PERIOD : in out CPERAROR:. 

THE_MET : in out OPERATORS ) returns UPFER BOGE: 


begin 


function CALC_LOWER returns LOWER_BOUND is 

begin 
GET ( THE_START[i] : in of SCHEDULES ia, 
GET ( THE _PERIOD[i] ; in out OPERATOR Ca. 
LOWER_BOUND[1] := THE _START[1] + THES PER ia 
returns LOWER_BOUND; 

end CALC_LOWER; 


PUT ¢€ LOWER_SOUND[i] : out SCIISDULE INPUTS. Tih SLOwi er 


function CALC_UPPER returns UPPERSBOUND Sa 
begin 
GET ( THEJ.START[1] =: in ott PRECEDE NCI Riser 
GET © THESPERIOD[i] : an oul OFER tocar 
GET © THESMED[i)- in sour OPER sie me). 
UPPER_BOUND[i] := [TIE_START[i] + (2*TIDE_PERIOD[ii)) = ian ee 
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returns UPFPER_BOUND; 
end CALC_UPPER; 


POPPE DOUNDEi) : souteoGHEDULE INPUTS. THE_UPPER[1] ); 
end CREATE_INTERVAL; 
procedure SCHEDULE_INITIAL_SET ( PRECEDENCE_ULIST : TEXT_IO. IN_FILE; 
Sep eDUMeINPULS = TEXT 10-0UT_FILE; 


CONTINUE : in out BOOLEAN; 
Tipe ne oue OPERATORS ) is 


Seni TIME : INTEGER = 0; 
Spore tiMk ~: INTEGER = 0; 
begin 
procedure VERIFY_TIME_LEFT ( CONTINUE : in out BOOLEAN ); 
begin 


while not PRECEDENCE_LIST. END_OF_FILE loop 
is inp eee nhNptie: in out PRECEDENCE LIST ); 
Peli ehord OPS tiener— EXTERNAL then 
begin 
Eis wine ine rE OUI INPUTs. OPERATOR([i] ); 
PUR omeEeins. ity oCHEOULE INPULS. THE_STARI[i] ); 
GET ( THE_MET[i] : in out OPERATOR ); 
SLOP Tilia olan be Et id t THE MET i); 
Pl Sporn rh ini: inesCHhDULBeINPUIS. THE_SITOP[i]} ); 
end; 
else 
Pect ar emwremmilin Le ae TDL irl); 
end if; 
SOARI ieee Oo LOPLLINED SL): 
procedure CREATE_INTERVAL; 
end loop; 
end; 


end SCHEDULE_INITIAL_SET; 


Praeeccaure oOnEUULESKEST OF BLOCK (CSCHEBULE_INPUTS : TEXT_IO. OUT_FILE; 
CONTINGE + in ote» BOCLEAN; 
Dipole. Ine OUuG OPERATORS ) is 


begin 
Deocedire Vint PY TIME LEFT € CONTINUE : in out BOOLEAN ); 
while not SCHEDULE_INPUTS. END_OF_FILE loop 
GET ( THE_LOWER. ‘SMALLEST : in out SCHEDULE_INPUTS ); 
Gel ( THE_STOP. LARGEST : in out SCHEDULE_INFUTS ); 
if THE_LOWER. ‘SMALLEST >= THE_STOP. 'LARGEST then 
begin 
START_TIME := THE_LOWER. ‘SMALLEST; 
GET (OPERATOR. ‘SMALLEST : in out SCHEDULE_INPUTS ); 
PUT ( START_TIME in SCHEDULE_INPUTS. THE_START ); 
Cihiet tHE ED - sin ou OPERATORS ); 
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STOP_TIME := START TUG teeta 
PUT ( STOP_TIME : in SCHEDULE INPUTS” Tie no 
end; 
else 


exception 
when others => 
raise INVALID_SCHEDULE; 
(exit and terminate the Static Scheduler) 


end if; 

START TIME == shOP So ritik 

procedure CREATE_INTERVAL; 
end loop; 


end SCHEDULE_REST_OF_BLOCK; 


procedure CREATE_STATIC_SCHEDULE ¢( SCHEDULE_INPUTS : TEXT_10. INS Iie: 
STATIC _SCEEDULE : TEXT_I[0O.OUTT? tia 


begin 
GREATE ( STATIC_SCHEDULE * TE Xt 10) 0URmr inven. 
PUT_LINE (‘package THE_STATIC_SCHEDULE is “); 
PUT_LINE (‘‘task SEQUENCE_OF_CALLS is "); 
while not SCHEDULE_INPUTS.END_OF_FILE loop 
begin 
GET ( OPERATOR[i] : in out SCHEDULE_INPUTS ); 
PUT ("entry EACH_OPERATOR. '' OPERATOR[i] ); 
GET ( THE_START[i] : in out SCHEDULE_INPUTS ); 
PUT_LINE ( "("THE_START[i]" : in out INTEGER; ); 
GET ( THE _STOP{i] > in out SCHEDURENINPUGS. )- 
PUT_LINE ( THE_STOP{i]" : in out INTEGER);" ); 
GET ( THE_START[i+1] : in out SCHEDULE_INPUTS ); 
if THE_START[i+1] = THE_STOP[i] then 
begin 
OPERATOR[i] := OPERATOR[{it1]; 
return to the beginning of the loop 


end; 
elsif 
THE_START[i+1l] > THE_STOP{i] then 
begin 
PUT_LINE ("entry DYNAMIC ("THE_STOP{i]" : in out INTEGER;" ); 
PUT_LINE (THE_START{[i+1] " : in out INTEGER );" ); 


OPERATOR(1] := OCFERALOR( IE, 
return to beginning of the loop; 
end; 
else 


exception 
when THE -STARI[i+£1) < THE STORRS = 
raise SCHEBULECGERROR: 
(exit and terminate the Static Scheduler) 


Snel gia 


end; 
end loop; 


LOS 





PUT_LINE ( "end SEQUENCE_OF_CALLS;" ); 


while not SCHEDULE_INPUTS. END_OF_FILE loop 
PUT_LINE ( "with CALENDAR;" ); 


-- second time for body 


X 
PUT_LINE ( package body THE_ SVerGeocCHROULE as’): 
ECienINE () begin ): 
PUT_LINE ( Deer body SEQUENCE_OF_CALLS is" ); 
PUT_LINE ( "begin' ); 
POSING loop ); 
PUT_LINE ( procedure THE_OPERATOR is" ); 
LOeh NEC beein |); 


PUT ("accept EACH_OPERATOR. " OPERATOR[ i] Me 


PUT_LINE ( " (" THE_START[i]" : in out INTEGER;" ); 

BOT iINEO@ Tih STOP[iy ° in out JNTEGER ) do” ); 

PUD LINE select! a ? 

PUT_LINE ( ‘when CLOCK. VALUE < " THE_STOP[i] " then” ); 
PUT_LINE ( ane DYNAMIC" ); 

PUT_LINE ( ye 

PUT_LINE ( eh CUOCK Vabume= The STOIT?] ' then’ ): 
PUT_LINE ( entry EACH_OPERATOR. " OPERATOR{i+1] ); 
Polo. INE ( Heise” be 

PUT_LINE ( ' exception" De 

PUT_LINE ( when oleic =e 

PUT_LINE ( "raise RUNTIME _MET_ FAILURE" ); 

PUT_LINE ( "end THE _OPERATOR; aan 

PUT_LINE ( ' end loop;" J F 

PUT_LINE ( "end SEQUENCE_OF_CALLS; ); 

POR GN (es lend THE STATIC. SCHEDULE; ys 


end OPERATOR_SCHEDULER; 


end STATIC_SCHEDULER; 
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APRENDIN ES Clo Or ACKON YMS 


AG Atturbute Grammar 

CEES: Computer Aided Prototvping System 

Os Gambier inker Exporter 

DED Data Flow Diagram 

DOD Department of Defense 

OOS Department of the Navy 

ees Execution Support System 

PBR: First-In First-Out 

kG, Greatest Common Denonunator 

1 Input/Output 

LOM Least Common Multiple 

iC Minimum Calling Period 

Vite Ti \faximum Execution Time 

MRT Maximum Response Time 

rey De Prototype System Description Language 
_SDMS Software Design Management Svstem 

SECNAV Secretary of the Navy 

SS/TDMA Satellite-Switched Time Division 

Multiple Access 
TDMA Time Division Multiple Access 
Ul ser invertaec 
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